Microsoft Edge Chakra JIT suffers from a loop analysis bug that can perform an out-of-bounds write.
3e5ec999eb8d74a1dbd4ccc9bb26b52067a006e4c7f4e4f43a4a999f1cef8d51
This Microsoft bulletin summary lists major revision increments for over a dozen CVEs that have been addressed.
5848181ca8df9846260988604002ca7b59b0a857b7d4dedf4caeae500c687777