Chrome JSPromise::TriggerPromiseReactions Type Confusion

Chrome suffers from a type confusion vulnerability in JSPromise::TriggerPromiseReactions.

Leave a Reply