Bypassing Windows Administrator Protection

A Google Project Zero post detailing a bypass of Windows' Administrator Protection feature through abuse of UI Access, one of nine bypasses found and fixed.

A Google Project Zero write-up describing a technique for testing race conditions using memory access tracing and stack-based delay injection.

A Google Project Zero post describing an attempt to build a zero-click exploit chain to root for the Pixel 10, following their earlier two-exploit Pixel 9 chain.

A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.

A Project Zero post describing how VirtualBox's process hardening protections on Windows can be bypassed, with technical analysis of the underlying weaknesses.

A Project Zero post on bypassing Samsung's Real-Time Kernel Protection on Android, defeating hypervisor-based integrity checks meant to block kernel tampering.