Microsoft Edge Chakra JIT suffers from a stack-to-heap copy bug.
a1676ee18b08a013b47916fe92086dcbe4bcd51909427cb9e5b3b106e5024a96
This Microsoft bulletin summary lists major revision increments for over a dozen CVEs that have been addressed.
5848181ca8df9846260988604002ca7b59b0a857b7d4dedf4caeae500c687777