CVE-2019-10617 – AtherosSvc Registry LPE

Research into the Qualcomm DSP driver that unexpectedly unearthed an exploitable bug, covering reverse engineering of its interface, root cause analysis, and exploit development.

Part 5 of the Windows Registry Adventure series, dissecting the regf file format underlying registry hives, its parsing hazards, and why it matters for fuzzing.

Part 4 of the Windows Registry Adventure series, explaining hive files and the overall registry layout, laying the groundwork for the later attack surface analysis.

A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.

NetSPI found arbitrary SYSTEM file delete and overwrite flaws in SonicWall NetExtender for Windows (CVE-2025-23009, CVE-2025-23010) and chained them into local privilege escalation. Fixed in 10.3.2.

Part three of the N-day exploit chain series, covering a Windows driver privilege-escalation flaw used to move from medium-integrity access to SYSTEM in a full exploit chain.