Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due a use-after-free (UAF) bug in Parse.cpp when an asynchronous arrow functions are used, which would allow a remote attacker to leave a bogus reference to the async identifier and execute arbitrary code in the context of the authenticated user.