This exploit is mitigated by disabling JIT, which you can do in edge. Chrome only has a "disable v8 optimizations", which doesn't entirely disable JIT, but might still mitigate this bug. Not sure about all the other chrome forks.