Microsoft Edge Call_RegEx_Symbol_Function Return Type

A Type Confusion vulnerability exists in Microsoft Edge. The vulnerability is that JavaScript regex function doesn't check the return type. Successful exploitation of this vulnerability can achieve Remote Code Execution.

from Check Point Update Services Advisories http://ift.tt/2t2IJy3