The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code which allows remote attackers to obtain sensitive information via a crafted web site aka \Microsoft Browser Information Disclosure Vulnerability.\