A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

First part of Project Zero's Pixel 9 zero-click chain series, examining the Dolby audio decoder attack surface reachable from remote media input and developing a potential RCE exploit.

The concluding part of Project Zero's Pixel 9 zero-click exploit chain series, reflecting on lessons from the research and which platform improvements would raise the cost of such attacks.

A Google Project Zero write-up describing a technique for testing race conditions using memory access tracing and stack-based delay injection.

A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.

A Google Project Zero post detailing a bypass of Windows' Administrator Protection feature through abuse of UI Access, one of nine bypasses found and fixed.

A Google Project Zero analysis of Windows 11 25H2's Administrator Protection feature, which replaces UAC, and methods for bypassing it.