A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.
The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...