A new proof of concept bug was outlined this week, something in javascript called an "'OnKeyDown" event", that can be found in the popular Mozilla based browsers and also in Internet Explorer, windows and linux. Although not rated all that critical, because it requires user interaction to trigger the exploit, the vendors are supposedly working on a patch. The findings came on the full disclosure mailing list.