Microsoft Edge Chakra suffers from an AsmJSByteCodeGenerator::EmitCall call handling bug.
7852e6e6b74797631b260388f45157c223bcb66924df196f3379c451cad2773b
This Microsoft bulletin summary lists major revision increments for over a dozen CVEs that have been addressed.
5848181ca8df9846260988604002ca7b59b0a857b7d4dedf4caeae500c687777