Details about this PoC can be found here:
SOP bypass/ UXSS on IE - More Adventures in a Domainless World
[ Patched on 2017-04-11 ]
This PoC is for IE10/IE11 only but with a little tweak it can work in all IE.
Click the button below once enabled (we are just waiting until the iframe is loaded)