Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-1895
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056