Bypassing Administrator Protection by Abusing UI Access

A Google Project Zero analysis of Windows 11 25H2's Administrator Protection feature, which replaces UAC, and methods for bypassing it.

A Project Zero post describing how VirtualBox's process hardening protections on Windows can be bypassed, with technical analysis of the underlying weaknesses.

A Google Project Zero write-up describing a technique for testing race conditions using memory access tracing and stack-based delay injection.

A Google Project Zero post describing an attempt to build a zero-click exploit chain to root for the Pixel 10, following their earlier two-exploit Pixel 9 chain.

A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.

A Project Zero post explains how arbitrary file write bugs on Windows can be turned into local privilege escalation, walking through practical exploitation techniques for this bug class.