1. 6

As Tavis Ormandy posted on twitter:

All Blizzard games (World of Warcraft, Overwatch, Diablo III, Starcraft II, etc.) were vulnerable to DNS rebinding vulnerability allowing any website to run arbitrary code.

https://twitter.com/taviso/status/955540415263907840