As Tavis Ormandy posted on twitter:
All Blizzard games (World of Warcraft, Overwatch, Diablo III, Starcraft II, etc.) were vulnerable to DNS rebinding vulnerability allowing any website to run arbitrary code.
https://twitter.com/taviso/status/955540415263907840