A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.Referenceshttps://bugs.chromium.org/p/chromium/issues/detail?id=81351https://trac.webkit.org/changeset/80155/webkit
