Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Testing race conditions with memory access tracing and stack-based delay injection

projectzero.google | blog | #vulnerability-research | #race-conditions | #google-project-zero | #memory-access-tracing | #delay-injection

Summary

A Google Project Zero write-up describing a technique for testing race conditions using memory access tracing and stack-based delay injection.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
A Google Project Zero post describing an attempt to build a zero-click exploit chain to root for the Pixel 10, following their earlier two-exploit Pixel 9 chain.
blog · projectzero.google
On the Effectiveness of Mutational Grammar Fuzzing
A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.
blog · projectzero.google
Bypassing Administrator Protection by Abusing UI Access
A Google Project Zero post detailing a bypass of Windows' Administrator Protection feature through abuse of UI Access, one of nine bypasses found and fixed.
blog · projectzero.google
Bypassing Windows Administrator Protection
A Google Project Zero analysis of Windows 11 25H2's Administrator Protection feature, which replaces UAC, and methods for bypassing it.
blog · projectzero.google
Owning Internet Printing - A Case Study in Modern Software Exploitation
A Google Project Zero case study demonstrating a complete exploit chain against the CUPS internet printing service.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
back