Internet Explorer Protected Mode In Windows 8

This report explains how Internet Explorer's Protected Mode confines extensions to low integrity but still permits broad read access to the filesystem and limited write locations (e.g., AppData\LocalLow), enabling potential data exfiltration by malicious extensions; it also describes Integrity Elevation Policies and notes that Windows 8's Enhanced Protected Mode (which would reduce read access) was disabled by default in IE10, leaving continued risk of data leakage.