Microsoft Edge Chakra JIT ImplicitCallFlags Check Bypass

Microsoft Edge: Chakra: JIT: ImplicitCallFlags check bypass with Intl CVE-2018-8288 If the Intl object hasn't been initialized, access to any property of it will trigger the initialization process which will run Intl.js. The problem is that it runs Intl.js without caring about the ImplicitCallFla...