I have a bunch of Security Updates in queue for Windows 7, affecting various versions of the .NET framework. I read some of the descriptions. Here's one:
This update resolves vulnerabilities in the Microsoft .NET Framework. The most severe of these vulnerabilities could allow elevation of privilege if an attacker injects a client-side script into a user's browser. To learn more about this vulnerability, see Microsoft Security Bulletin MS15-118.
Security Bulletin MS15-118 says:
The most severe of the vulnerabilities could allow elevation of privilege if an attacker convinces a user to navigate to a compromised website or open a link in a specially crafted email that is designed to inject client-side code into the user’s browser.
What is meant by "user's browser" in this context? Does this vulnerability affect any browser, not just IE?