General Research

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg

DECEMBER 19, 2022

By Sergi Martinez Overview It’s been a while since our last technical blogpost, so here’s one right on time for the Christmas holidays. We describe a method to exploit a use-after-free in the Linux...

Read More

Exploiting a use-after-free in Windows Common Logging File System (CLFS)

MARCH 10, 2022

By Arav Garg Overview This post analyzes a use-after-free vulnerability in clfs.sys, the kernel driver that implements the Common Logging File System, a general-purpose logging service that can be used by user-space and kernel-space...

Read More

Analysis of a Heap Buffer-Overflow Vulnerability in Adobe Acrobat Reader DC

OCTOBER 4, 2021

By Sergi Martinez In late June, we published a blog post containing analysis of exploitation of a heap-buffer overflow vulnerability in Adobe Reader, a vulnerability that we thought corresponded to CVE-2021-21017. The starting point...

Read More

Analysis of a Heap Buffer-Overflow Vulnerability in Microsoft Windows Address Book

AUGUST 5, 2021

By Eneko Cruz Elejalde Overview This post analyzes a heap-buffer overflow in Microsoft Windows Address Book. Microsoft released an advisory for this vulnerability for the 2021 February patch Tuesday. This post will go into...

Read More

Analysis of a use-after-free Vulnerability in Adobe Acrobat Reader DC

APRIL 20, 2021

By Sergi Martinez This post analyses CVE-2020-9715, a use-after-free vulnerability affecting several versions of the Adobe Acrobat and Adobe Acrobat Reader products. The vulnerability was discovered by Mark Vincent Yason, who reported it to...

Read More

Firefox Vulnerability Research Part 2

NOVEMBER 10, 2020

By Arthur Gerkis and David Barksdale This series of posts makes public some old Firefox research which our Zero-Day customers had access to before it was known publicly, and then our N-Day customers after...

Read More

Firefox Vulnerability Research

OCTOBER 20, 2020

By Arthur Gerkis and David Barksdale This series of posts makes public some old Firefox research which our Zero-Day customers had access to before it was known publicly, and then our N-Day customers after...

Read More

A EULOGY FOR PATCH-GAPPING CHROME

FEBRUARY 24, 2020

Authors: István Kurucsai and Vignesh S Rao In 2019 we looked at patch gapping Chrome on two separate occasions. The conclusion was that exploiting 1day vulnerabilities well before the fixes were distributed through the stable channel...

Read More