[CVE-2023-0266] Analyzing a Modern In-the-wild Android Exploit

An analysis of an in-the-wild Android exploit targeting the DNG image format, walking through the vulnerable parsing code, the exploit technique, and remediation.

.post-body{ul.lst-kix_lw3zh1qbhlji-0{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-1{list-style-type:none}.lst-kix_f28qers2ka94-4>li{counter-increment:lst-ctn-kix_f28qers2ka94-4}ul.lst-kix_lw3zh1qbhlji-6{list-style-type:none}.lst-kix_o1lgec7ujykk-8>li:before{content:"- "}ul.lst-kix_lw3zh1qbhlji-7{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-8{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-2{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-3{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-4{list-style-type:none}ul.lst-kix_lw3zh1qbhlji-5{list-style-type:none}ol.lst-kix_f28qers2ka94-5.start{counter-reset:lst-ctn-kix_f28qers2ka94-5 0}.lst-kix_f28qers2ka94-2>li{counter-increment:lst-ctn-kix_f28qers2ka94-2}.lst-kix_thuqgp6gfs8h-2>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-2}.lst-kix_olvs1jbt89fl-4>li:before{content:"- "}.lst-kix_olvs1jbt89fl-5>li:before{content:"- "}.lst-kix_olvs1jbt89fl-7>li:before{content:"- "}.lst-kix_thuqgp6gfs8h-4>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-4}.lst-kix_olvs1jbt89fl-6>li:before{content:"- "}ol.lst-kix_thuqgp6gfs8h-4.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-4 0}.lst-kix_olvs1jbt89fl-8>li:before{content:"- "}ul.lst-kix_5kmetj22qqvk-7{list-style-type:none}ul.lst-kix_5kmetj22qqvk-6{list-style-type:none}ul.lst-kix_5kmetj22qqvk-5{list-style-type:none}ul.lst-kix_5kmetj22qqvk-4{list-style-type:none}ul.lst-kix_5kmetj22qqvk-3{list-style-type:none}.lst-kix_thuqgp6gfs8h-6>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-6}ul.lst-kix_5kmetj22qqvk-2{list-style-type:none}ul.lst-kix_5kmetj22qqvk-1{list-style-type:none}ul.lst-kix_5kmetj22qqvk-0{list-style-type:none}ol.lst-kix_f28qers2ka94-6.start{counter-reset:lst-ctn-kix_f28qers2ka94-6 0}ol.lst-kix_thuqgp6gfs8h-3.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-3 0}.lst-kix_5kmetj22qqvk-8>li:before{content:"- "}.lst-kix_olvs1jbt89fl-3>li:before{content:"- "}.lst-kix_olvs1jbt89fl-2>li:before{content:"- "}.lst-kix_5kmetj22qqvk-0>li:before{content:"- "}.lst-kix_olvs1jbt89fl-1>li:before{content:"- "}.lst-kix_f28qers2ka94-8>li{counter-increment:lst-ctn-kix_f28qers2ka94-8}.lst-kix_5kmetj22qqvk-2>li:before{content:"- "}.lst-kix_5kmetj22qqvk-1>li:before{content:"- "}.lst-kix_olvs1jbt89fl-0>li:before{content:"- "}.lst-kix_o1lgec7ujykk-7>li:before{content:"- "}.lst-kix_o1lgec7ujykk-6>li:before{content:"- "}.lst-kix_5kmetj22qqvk-7>li:before{content:"- "}.lst-kix_o1lgec7ujykk-4>li:before{content:"- "}.lst-kix_o1lgec7ujykk-3>li:before{content:"- "}.lst-kix_o1lgec7ujykk-5>li:before{content:"- "}.lst-kix_5kmetj22qqvk-6>li:before{content:"- "}ol.lst-kix_f28qers2ka94-0.start{counter-reset:lst-ctn-kix_f28qers2ka94-0 0}.lst-kix_5kmetj22qqvk-5>li:before{content:"- "}.lst-kix_o1lgec7ujykk-0>li:before{content:"- "}.lst-kix_o1lgec7ujykk-1>li:before{content:"- "}.lst-kix_5kmetj22qqvk-4>li:before{content:"- "}.lst-kix_o1lgec7ujykk-2>li:before{content:"- "}.lst-kix_thuqgp6gfs8h-0>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-0}.lst-kix_5kmetj22qqvk-3>li:before{content:"- "}ul.lst-kix_5kmetj22qqvk-8{list-style-type:none}.lst-kix_c52otkrerajb-7>li:before{content:"- "}ol.lst-kix_f28qers2ka94-4.start{counter-reset:lst-ctn-kix_f28qers2ka94-4 0}.lst-kix_c52otkrerajb-5>li:before{content:"- "}.lst-kix_tjxel15w0vnb-0>li:before{content:"\0025cf "}.lst-kix_b2z7bfhnik92-1>li:before{content:"- "}ol.lst-kix_thuqgp6gfs8h-5.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-5 0}.lst-kix_f28qers2ka94-1>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-1,lower-latin) ". "}ol.lst-kix_f28qers2ka94-1.start{counter-reset:lst-ctn-kix_f28qers2ka94-1 0}ul.lst-kix_t4et3tnq1pzp-3{list-style-type:none}ul.lst-kix_t4et3tnq1pzp-4{list-style-type:none}.lst-kix_b2z7bfhnik92-5>li:before{content:"- "}ul.lst-kix_t4et3tnq1pzp-1{list-style-type:none}ul.lst-kix_t4et3tnq1pzp-2{list-style-type:none}ul.lst-kix_t4et3tnq1pzp-7{list-style-type:none}ul.lst-kix_t4et3tnq1pzp-8{list-style-type:none}.lst-kix_c52otkrerajb-1>li:before{content:"- "}.lst-kix_b2z7bfhnik92-3>li:before{content:"- "}.lst-kix_b2z7bfhnik92-7>li:before{content:"- "}ul.lst-kix_t4et3tnq1pzp-5{list-style-type:none}ul.lst-kix_t4et3tnq1pzp-6{list-style-type:none}.lst-kix_lw3zh1qbhlji-0>li:before{content:"\0025cf "}ol.lst-kix_thuqgp6gfs8h-8.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-8 0}.lst-kix_c52otkrerajb-3>li:before{content:"- "}ul.lst-kix_t4et3tnq1pzp-0{list-style-type:none}ul.lst-kix_tjxel15w0vnb-1{list-style-type:none}ul.lst-kix_tjxel15w0vnb-2{list-style-type:none}ul.lst-kix_tjxel15w0vnb-3{list-style-type:none}ul.lst-kix_tjxel15w0vnb-4{list-style-type:none}ul.lst-kix_tjxel15w0vnb-0{list-style-type:none}ul.lst-kix_tjxel15w0vnb-5{list-style-type:none}ul.lst-kix_tjxel15w0vnb-6{list-style-type:none}ul.lst-kix_tjxel15w0vnb-7{list-style-type:none}ul.lst-kix_tjxel15w0vnb-8{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-7.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-7 0}ul.lst-kix_b2z7bfhnik92-7{list-style-type:none}ul.lst-kix_b2z7bfhnik92-8{list-style-type:none}ul.lst-kix_b2z7bfhnik92-5{list-style-type:none}ul.lst-kix_b2z7bfhnik92-6{list-style-type:none}ul.lst-kix_b2z7bfhnik92-3{list-style-type:none}ul.lst-kix_b2z7bfhnik92-4{list-style-type:none}ul.lst-kix_b2z7bfhnik92-1{list-style-type:none}ul.lst-kix_b2z7bfhnik92-2{list-style-type:none}ul.lst-kix_b2z7bfhnik92-0{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-8{list-style-type:none}ul.lst-kix_c52otkrerajb-0{list-style-type:none}ul.lst-kix_o1lgec7ujykk-5{list-style-type:none}ul.lst-kix_o1lgec7ujykk-6{list-style-type:none}ul.lst-kix_o1lgec7ujykk-7{list-style-type:none}ul.lst-kix_o1lgec7ujykk-8{list-style-type:none}ul.lst-kix_o1lgec7ujykk-1{list-style-type:none}ol.lst-kix_f28qers2ka94-2.start{counter-reset:lst-ctn-kix_f28qers2ka94-2 0}ul.lst-kix_o1lgec7ujykk-2{list-style-type:none}ul.lst-kix_o1lgec7ujykk-3{list-style-type:none}ul.lst-kix_o1lgec7ujykk-4{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-0{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-1{list-style-type:none}.lst-kix_thuqgp6gfs8h-5>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-5}ol.lst-kix_thuqgp6gfs8h-2{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-3{list-style-type:none}.lst-kix_7gtwvv8lds0h-2>li:before{content:"- "}ul.lst-kix_o1lgec7ujykk-0{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-4{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-5{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-6{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-7{list-style-type:none}ol.lst-kix_thuqgp6gfs8h-6.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-6 0}.lst-kix_7gtwvv8lds0h-4>li:before{content:"- "}.lst-kix_7gtwvv8lds0h-6>li:before{content:"- "}.lst-kix_f28qers2ka94-7>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-7,lower-latin) ". "}ul.lst-kix_c52otkrerajb-8{list-style-type:none}.lst-kix_tjxel15w0vnb-8>li:before{content:"\0025a0 "}ul.lst-kix_c52otkrerajb-7{list-style-type:none}ul.lst-kix_c52otkrerajb-6{list-style-type:none}ul.lst-kix_c52otkrerajb-5{list-style-type:none}.lst-kix_7gtwvv8lds0h-8>li:before{content:"- "}ul.lst-kix_c52otkrerajb-4{list-style-type:none}ul.lst-kix_olvs1jbt89fl-6{list-style-type:none}ul.lst-kix_c52otkrerajb-3{list-style-type:none}ul.lst-kix_olvs1jbt89fl-5{list-style-type:none}ul.lst-kix_c52otkrerajb-2{list-style-type:none}ul.lst-kix_olvs1jbt89fl-8{list-style-type:none}ul.lst-kix_c52otkrerajb-1{list-style-type:none}ul.lst-kix_olvs1jbt89fl-7{list-style-type:none}.lst-kix_tjxel15w0vnb-4>li:before{content:"\0025cb "}.lst-kix_f28qers2ka94-3>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-3,decimal) ". "}ul.lst-kix_olvs1jbt89fl-2{list-style-type:none}.lst-kix_f28qers2ka94-0>li{counter-increment:lst-ctn-kix_f28qers2ka94-0}ul.lst-kix_olvs1jbt89fl-1{list-style-type:none}.lst-kix_f28qers2ka94-6>li{counter-increment:lst-ctn-kix_f28qers2ka94-6}ul.lst-kix_olvs1jbt89fl-4{list-style-type:none}ul.lst-kix_olvs1jbt89fl-3{list-style-type:none}.lst-kix_tjxel15w0vnb-2>li:before{content:"\0025a0 "}.lst-kix_tjxel15w0vnb-6>li:before{content:"\0025cf "}ul.lst-kix_olvs1jbt89fl-0{list-style-type:none}ol.lst-kix_f28qers2ka94-3.start{counter-reset:lst-ctn-kix_f28qers2ka94-3 0}.lst-kix_f28qers2ka94-5>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-5,lower-roman) ". "}.lst-kix_thuqgp6gfs8h-3>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-3}.lst-kix_f28qers2ka94-5>li{counter-increment:lst-ctn-kix_f28qers2ka94-5}ol.lst-kix_f28qers2ka94-6{list-style-type:none}ol.lst-kix_f28qers2ka94-5{list-style-type:none}ol.lst-kix_f28qers2ka94-8{list-style-type:none}ol.lst-kix_f28qers2ka94-7{list-style-type:none}ol.lst-kix_f28qers2ka94-2{list-style-type:none}ol.lst-kix_f28qers2ka94-1{list-style-type:none}ol.lst-kix_f28qers2ka94-4{list-style-type:none}ol.lst-kix_f28qers2ka94-3{list-style-type:none}ol.lst-kix_f28qers2ka94-0{list-style-type:none}.lst-kix_7gtwvv8lds0h-1>li:before{content:"- "}.lst-kix_7gtwvv8lds0h-0>li:before{content:"- "}ol.lst-kix_thuqgp6gfs8h-1.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-1 0}ol.lst-kix_f28qers2ka94-8.start{counter-reset:lst-ctn-kix_f28qers2ka94-8 0}.lst-kix_t4et3tnq1pzp-4>li:before{content:"- "}.lst-kix_thuqgp6gfs8h-0>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-0,decimal) ". "}.lst-kix_thuqgp6gfs8h-1>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-1,lower-latin) ". "}.lst-kix_f38l0ecznhb0-6>li:before{content:"- "}.lst-kix_f38l0ecznhb0-7>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-3>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-5>li:before{content:"- "}.lst-kix_thuqgp6gfs8h-2>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-2,lower-roman) ". "}.lst-kix_thuqgp6gfs8h-3>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-3,decimal) ". "}.lst-kix_t4et3tnq1pzp-0>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-8>li:before{content:"- "}.lst-kix_f28qers2ka94-7>li{counter-increment:lst-ctn-kix_f28qers2ka94-7}.lst-kix_f38l0ecznhb0-3>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-1>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-2>li:before{content:"- "}.lst-kix_f28qers2ka94-1>li{counter-increment:lst-ctn-kix_f28qers2ka94-1}.lst-kix_f38l0ecznhb0-4>li:before{content:"- "}.lst-kix_f38l0ecznhb0-5>li:before{content:"- "}.lst-kix_f38l0ecznhb0-8>li:before{content:"- "}ul.lst-kix_7gtwvv8lds0h-0{list-style-type:none}ul.lst-kix_7gtwvv8lds0h-1{list-style-type:none}.lst-kix_lw3zh1qbhlji-1>li:before{content:"\0025cb "}ul.lst-kix_7gtwvv8lds0h-2{list-style-type:none}.lst-kix_lw3zh1qbhlji-2>li:before{content:"\0025a0 "}ul.lst-kix_7gtwvv8lds0h-7{list-style-type:none}.lst-kix_thuqgp6gfs8h-8>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-8,lower-roman) ". "}ul.lst-kix_7gtwvv8lds0h-8{list-style-type:none}.lst-kix_lw3zh1qbhlji-3>li:before{content:"\0025cf "}.lst-kix_lw3zh1qbhlji-5>li:before{content:"\0025a0 "}ul.lst-kix_7gtwvv8lds0h-3{list-style-type:none}.lst-kix_thuqgp6gfs8h-6>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-6,decimal) ". "}.lst-kix_thuqgp6gfs8h-7>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-7,lower-latin) ". "}ul.lst-kix_7gtwvv8lds0h-4{list-style-type:none}ul.lst-kix_7gtwvv8lds0h-5{list-style-type:none}.lst-kix_lw3zh1qbhlji-4>li:before{content:"\0025cb "}ul.lst-kix_7gtwvv8lds0h-6{list-style-type:none}.lst-kix_thuqgp6gfs8h-4>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-4,lower-latin) ". "}.lst-kix_thuqgp6gfs8h-5>li:before{content:"" counter(lst-ctn-kix_thuqgp6gfs8h-5,lower-roman) ". "}.lst-kix_f38l0ecznhb0-2>li:before{content:"- "}.lst-kix_t4et3tnq1pzp-7>li:before{content:"- "}.lst-kix_lw3zh1qbhlji-7>li:before{content:"\0025cb "}.lst-kix_t4et3tnq1pzp-6>li:before{content:"- "}.lst-kix_f38l0ecznhb0-0>li:before{content:"- "}.lst-kix_f38l0ecznhb0-1>li:before{content:"- "}.lst-kix_lw3zh1qbhlji-6>li:before{content:"\0025cf "}.lst-kix_c52otkrerajb-8>li:before{content:"- "}.lst-kix_c52otkrerajb-6>li:before{content:"- "}.lst-kix_b2z7bfhnik92-0>li:before{content:"- "}.lst-kix_lw3zh1qbhlji-8>li:before{content:"\0025a0 "}ol.lst-kix_thuqgp6gfs8h-2.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-2 0}.lst-kix_b2z7bfhnik92-2>li:before{content:"- "}.lst-kix_tjxel15w0vnb-1>li:before{content:"\0025cb "}.lst-kix_f28qers2ka94-0>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-0,decimal) ". "}.lst-kix_c52otkrerajb-0>li:before{content:"- "}.lst-kix_b2z7bfhnik92-6>li:before{content:"- "}ol.lst-kix_f28qers2ka94-7.start{counter-reset:lst-ctn-kix_f28qers2ka94-7 0}.lst-kix_c52otkrerajb-2>li:before{content:"- "}.lst-kix_b2z7bfhnik92-4>li:before{content:"- "}.lst-kix_b2z7bfhnik92-8>li:before{content:"- "}.lst-kix_thuqgp6gfs8h-8>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-8}.lst-kix_c52otkrerajb-4>li:before{content:"- "}ul.lst-kix_f38l0ecznhb0-8{list-style-type:none}ul.lst-kix_f38l0ecznhb0-6{list-style-type:none}ul.lst-kix_f38l0ecznhb0-7{list-style-type:none}ul.lst-kix_f38l0ecznhb0-4{list-style-type:none}ul.lst-kix_f38l0ecznhb0-5{list-style-type:none}ul.lst-kix_f38l0ecznhb0-2{list-style-type:none}ul.lst-kix_f38l0ecznhb0-3{list-style-type:none}ul.lst-kix_f38l0ecznhb0-0{list-style-type:none}ul.lst-kix_f38l0ecznhb0-1{list-style-type:none}.lst-kix_thuqgp6gfs8h-7>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-7}ol.lst-kix_thuqgp6gfs8h-0.start{counter-reset:lst-ctn-kix_thuqgp6gfs8h-0 0}.lst-kix_thuqgp6gfs8h-1>li{counter-increment:lst-ctn-kix_thuqgp6gfs8h-1}.lst-kix_7gtwvv8lds0h-3>li:before{content:"- "}.lst-kix_7gtwvv8lds0h-5>li:before{content:"- "}.lst-kix_tjxel15w0vnb-7>li:before{content:"\0025cb "}.lst-kix_f28qers2ka94-8>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-8,lower-roman) ". "}.lst-kix_7gtwvv8lds0h-7>li:before{content:"- "}.lst-kix_f28qers2ka94-3>li{counter-increment:lst-ctn-kix_f28qers2ka94-3}.lst-kix_tjxel15w0vnb-3>li:before{content:"\0025cf "}.lst-kix_tjxel15w0vnb-5>li:before{content:"\0025a0 "}.lst-kix_f28qers2ka94-2>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-2,lower-roman) ". "}.lst-kix_f28qers2ka94-6>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-6,decimal) ". "}.lst-kix_f28qers2ka94-4>li:before{content:"" counter(lst-ctn-kix_f28qers2ka94-4,lower-latin) ". "}ol{margin:0;padding:0}table td,table th{padding:0}.c16{padding-top:0pt;padding-bottom:0pt;line-height:1.25;orphans:2;widows:2;text-align:left;height:11pt}.c13{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:"Arial";font-style:normal}.c2{background-color:#ffffff;padding-top:18pt;padding-bottom:6pt;line-height:1.38;orphans:2;widows:2;text-align:left}.c0{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left;height:11pt}.c5{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial";font-style:normal}.c6{padding-top:18pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c17{padding-top:0pt;padding-bottom:0pt;line-height:1.25;orphans:2;widows:2;text-align:left}.c7{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c12{color:#000000;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial";font-style:normal}.c14{color:#000000;text-decoration:none;vertical-align:baseline;font-size:11pt;font-style:normal}.c18{font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial"}.c9{text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline}.c10{background-color:#ffffff;max-width:468pt;padding:72pt 72pt 72pt 72pt}.c1{color:inherit;text-decoration:inherit}.c8{font-weight:400;font-family:"Courier New"}.c3{background-color:#ffffff;color:#545454}.c11{background-color:#ffffff;font-style:italic}.c4{font-weight:700}.c15{font-style:italic}.title{padding-top:0pt;color:#000000;font-size:26pt;padding-bottom:3pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.subtitle{padding-top:0pt;color:#666666;font-size:15pt;padding-bottom:16pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}li{color:#000000;font-size:11pt;font-family:"Arial"}p{margin:0;color:#000000;font-size:11pt;font-family:"Arial"}h1{padding-top:20pt;color:#000000;font-size:20pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h2{padding-top:18pt;color:#000000;font-size:16pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h3{padding-top:16pt;color:#434343;font-size:14pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h4{padding-top:14pt;color:#666666;font-size:12pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h5{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h6{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}}This is part 4 of a 6-part series detailing a set of vulnerabilities found by Project Zero being exploited in the wild. To read the other parts of the series, see the introduction post.

/* armenian */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2'); unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17; } /* bengali */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1; } /* canadian-aboriginal */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPh0UvaYr.woff2) format('woff2'); unicode-range: U+02C7, U+02D8-02D9, U+02DB, U+0307, U+1400-167F, U+18B0-18F5, U+25CC, U+11AB0-11ABF; } /* cyrillic-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F; } /* cyrillic */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjYUvaYr.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116; } /* devanagari */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjMUvaYr.woff2) format('woff2'); unicode-range: U+0900-097F, U+1CD0-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B09; } /* ethiopic */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiMUvaYr.woff2) format('woff2'); unicode-range: U+030E, U+1200-1399, U+2D80-2DDE, U+AB01-AB2E, U+1E7E0-1E7E6, U+1E7E8-1E7EB, U+1E7ED-1E7EE, U+1E7F0-1E7FE; } /* georgian */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi0UvaYr.woff2) format('woff2'); unicode-range: U+0589, U+10A0-10FF, U+1C90-1CBA, U+1CBD-1CBF, U+205A, U+2D00-2D2F, U+2E31; } /* greek-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj4UvaYr.woff2) format('woff2'); unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjEUvaYr.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF; } /* gujarati */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPikUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0A80-0AFF, U+200C-200D, U+20B9, U+25CC, U+A830-A839; } /* gurmukhi */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPhEUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0A01-0A76, U+200C-200D, U+20B9, U+25CC, U+262C, U+A830-A839; } /* hebrew */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjAUvaYr.woff2) format('woff2'); unicode-range: U+0307-0308, U+0590-05FF, U+200C-2010, U+20AA, U+25CC, U+FB1D-FB4F; } /* khmer */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjkUvaYr.woff2) format('woff2'); unicode-range: U+1780-17FF, U+19E0-19FF, U+200C-200D, U+25CC; } /* lao */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjsUvaYr.woff2) format('woff2'); unicode-range: U+0E81-0EDF, U+200C-200D, U+25CC; } /* malayalam */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPioUvaYr.woff2) format('woff2'); unicode-range: U+0307, U+0323, U+0951-0952, U+0964-0965, U+0D00-0D7F, U+1CDA, U+1CF2, U+200C-200D, U+20B9, U+25CC, U+A830-A832; } /* oriya */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPisUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0B01-0B77, U+1CDA, U+1CF2, U+200C-200D, U+20B9, U+25CC; } /* sinhala */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi8UvaYr.woff2) format('woff2'); unicode-range: U+0964-0965, U+0D81-0DF4, U+1CF2, U+200C-200D, U+25CC, U+111E1-111F4; } /* symbols */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPlwUvaYr.woff2) format('woff2'); unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF; } /* tamil */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiQUvaYr.woff2) format('woff2'); unicode-range: U+0964-0965, U+0B82-0BFA, U+200C-200D, U+20B9, U+25CC; } /* telugu */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi4UvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0C00-0C7F, U+1CDA, U+1CF2, U+200C-200D, U+25CC; } /* thai */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiYUvaYr.woff2) format('woff2'); unicode-range: U+02D7, U+0303, U+0331, U+0E01-0E5B, U+200C-200D, U+25CC; } /* vietnamese */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj0UvaYr.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB; } /* latin-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjwUvaYr.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF; } /* latin */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } /* armenian */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2'); unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17; } /* bengali */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1; } /* canadian-aboriginal */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPh0UvaYr.woff2) format('woff2'); unicode-range: U+02C7, U+02D8-02D9, U+02DB, U+0307, U+1400-167F, U+18B0-18F5, U+25CC, U+11AB0-11ABF; } /* cyrillic-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F; } /* cyrillic */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjYUvaYr.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116; } /* devanagari */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjMUvaYr.woff2) format('woff2'); unicode-range: U+0900-097F, U+1CD0-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B09; } /* ethiopic */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiMUvaYr.woff2) format('woff2'); unicode-range: U+030E, U+1200-1399, U+2D80-2DDE, U+AB01-AB2E, U+1E7E0-1E7E6, U+1E7E8-1E7EB, U+1E7ED-1E7EE, U+1E7F0-1E7FE; } /* georgian */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi0UvaYr.woff2) format('woff2'); unicode-range: U+0589, U+10A0-10FF, U+1C90-1CBA, U+1CBD-1CBF, U+205A, U+2D00-2D2F, U+2E31; } /* greek-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj4UvaYr.woff2) format('woff2'); unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjEUvaYr.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF; } /* gujarati */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPikUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0A80-0AFF, U+200C-200D, U+20B9, U+25CC, U+A830-A839; } /* gurmukhi */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPhEUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0A01-0A76, U+200C-200D, U+20B9, U+25CC, U+262C, U+A830-A839; } /* hebrew */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjAUvaYr.woff2) format('woff2'); unicode-range: U+0307-0308, U+0590-05FF, U+200C-2010, U+20AA, U+25CC, U+FB1D-FB4F; } /* khmer */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjkUvaYr.woff2) format('woff2'); unicode-range: U+1780-17FF, U+19E0-19FF, U+200C-200D, U+25CC; } /* lao */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjsUvaYr.woff2) format('woff2'); unicode-range: U+0E81-0EDF, U+200C-200D, U+25CC; } /* malayalam */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPioUvaYr.woff2) format('woff2'); unicode-range: U+0307, U+0323, U+0951-0952, U+0964-0965, U+0D00-0D7F, U+1CDA, U+1CF2, U+200C-200D, U+20B9, U+25CC, U+A830-A832; } /* oriya */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPisUvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0B01-0B77, U+1CDA, U+1CF2, U+200C-200D, U+20B9, U+25CC; } /* sinhala */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi8UvaYr.woff2) format('woff2'); unicode-range: U+0964-0965, U+0D81-0DF4, U+1CF2, U+200C-200D, U+25CC, U+111E1-111F4; } /* symbols */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPlwUvaYr.woff2) format('woff2'); unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF; } /* tamil */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiQUvaYr.woff2) format('woff2'); unicode-range: U+0964-0965, U+0B82-0BFA, U+200C-200D, U+20B9, U+25CC; } /* telugu */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPi4UvaYr.woff2) format('woff2'); unicode-range: U+0951-0952, U+0964-0965, U+0C00-0C7F, U+1CDA, U+1CF2, U+200C-200D, U+25CC; } /* thai */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiYUvaYr.woff2) format('woff2'); unicode-range: U+02D7, U+0303, U+0331, U+0E01-0E5B, U+200C-200D, U+25CC; } /* vietnamese */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj0UvaYr.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB; } /* latin-ext */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjwUvaYr.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF; } /* latin */ @font-face { font-family: 'Google Sans'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/s/googlesans/v70/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } @import url('https://themes.googleusercontent.com/fonts/css?kit=DFQxm4rd7fRHgM9OTejWVT5Vho6BE7M80rHXEVKqXWdbV0WvE1cEyAoIq5yYZlSc'); .post-body{.lst-kix_awzz6jhne7dj-6>li:before{content:"\0025cf "}.lst-kix_ps5q64vwwpgt-4>li:before{content:"- "}.lst-kix_ps5q64vwwpgt-3>li:before{content:"- "}.lst-kix_awzz6jhne7dj-4>li:before{content:"\0025cb "}.lst-kix_awzz6jhne7dj-8>li:before{content:"\0025a0 "}.lst-kix_ps5q64vwwpgt-2>li:before{content:"- "}.lst-kix_ps5q64vwwpgt-5>li:before{content:"- "}.lst-kix_ps5q64vwwpgt-6>li:before{content:"- "}.lst-kix_awzz6jhne7dj-5>li:before{content:"\0025a0 "}.lst-kix_awzz6jhne7dj-2>li:before{content:"\0025a0 "}.lst-kix_r1xag6gnfr2m-8>li:before{content:"\0025a0 "}.lst-kix_awzz6jhne7dj-3>li:before{content:"\0025cf "}.lst-kix_r1xag6gnfr2m-7>li:before{content:"\0025cb "}.lst-kix_r1xag6gnfr2m-4>li:before{content:"\0025cb "}.lst-kix_awzz6jhne7dj-0>li:before{content:"\0025cf "}.lst-kix_r1xag6gnfr2m-2>li:before{content:"\0025a0 "}.lst-kix_r1xag6gnfr2m-6>li:before{content:"\0025cf "}ol.lst-kix_hln5uguf3qqq-8.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-8 0}.lst-kix_awzz6jhne7dj-1>li:before{content:"\0025cb "}.lst-kix_r1xag6gnfr2m-1>li:before{content:"\0025cb "}.lst-kix_r1xag6gnfr2m-5>li:before{content:"\0025a0 "}.lst-kix_ps5q64vwwpgt-0>li:before{content:"- "}.lst-kix_dxgqhjhnlsrk-1>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-1}.lst-kix_ps5q64vwwpgt-1>li:before{content:"- "}.lst-kix_r1xag6gnfr2m-3>li:before{content:"\0025cf "}.lst-kix_r1xag6gnfr2m-0>li:before{content:"\0025cf "}ol.lst-kix_hln5uguf3qqq-3.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-3 0}.lst-kix_6u8prhcp5m48-7>li:before{content:"\0025cb "}.lst-kix_6u8prhcp5m48-8>li:before{content:"\0025a0 "}ul.lst-kix_6u8prhcp5m48-7{list-style-type:none}ul.lst-kix_6u8prhcp5m48-8{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-3.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-3 0}ul.lst-kix_6u8prhcp5m48-5{list-style-type:none}ul.lst-kix_6u8prhcp5m48-6{list-style-type:none}ul.lst-kix_6u8prhcp5m48-3{list-style-type:none}ul.lst-kix_6u8prhcp5m48-4{list-style-type:none}ul.lst-kix_6u8prhcp5m48-1{list-style-type:none}.lst-kix_ps5q64vwwpgt-7>li:before{content:"- "}.lst-kix_ps5q64vwwpgt-8>li:before{content:"- "}ul.lst-kix_6u8prhcp5m48-2{list-style-type:none}ul.lst-kix_6u8prhcp5m48-0{list-style-type:none}.lst-kix_awzz6jhne7dj-7>li:before{content:"\0025cb "}ul.lst-kix_i4lkh545s3dk-1{list-style-type:none}ul.lst-kix_i4lkh545s3dk-0{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-2{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-1{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-0{list-style-type:none}.lst-kix_i4lkh545s3dk-3>li:before{content:"\0025cf "}.lst-kix_i4lkh545s3dk-5>li:before{content:"\0025a0 "}ul.lst-kix_rd3fh31ar0ko-6{list-style-type:none}ul.lst-kix_zapj04isd5g3-6{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-5{list-style-type:none}ul.lst-kix_zapj04isd5g3-5{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-4{list-style-type:none}ul.lst-kix_zapj04isd5g3-8{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-3{list-style-type:none}.lst-kix_i4lkh545s3dk-4>li:before{content:"\0025cb "}ul.lst-kix_zapj04isd5g3-7{list-style-type:none}.lst-kix_i4lkh545s3dk-0>li:before{content:"\0025cf "}.lst-kix_6u8prhcp5m48-1>li:before{content:"\0025cb "}ul.lst-kix_rd3fh31ar0ko-8{list-style-type:none}ul.lst-kix_rd3fh31ar0ko-7{list-style-type:none}.lst-kix_i4lkh545s3dk-7>li:before{content:"\0025cb "}.lst-kix_6u8prhcp5m48-0>li:before{content:"\0025cf "}.lst-kix_i4lkh545s3dk-6>li:before{content:"\0025cf "}.lst-kix_6u8prhcp5m48-5>li:before{content:"\0025a0 "}.lst-kix_6u8prhcp5m48-6>li:before{content:"\0025cf "}.lst-kix_dxgqhjhnlsrk-8>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-8}ul.lst-kix_zapj04isd5g3-2{list-style-type:none}ul.lst-kix_zapj04isd5g3-1{list-style-type:none}.lst-kix_6u8prhcp5m48-2>li:before{content:"\0025a0 "}.lst-kix_i4lkh545s3dk-1>li:before{content:"\0025cb "}ul.lst-kix_zapj04isd5g3-4{list-style-type:none}ul.lst-kix_zapj04isd5g3-3{list-style-type:none}.lst-kix_6u8prhcp5m48-3>li:before{content:"\0025cf "}.lst-kix_6u8prhcp5m48-4>li:before{content:"\0025cb "}ul.lst-kix_zapj04isd5g3-0{list-style-type:none}.lst-kix_i4lkh545s3dk-2>li:before{content:"\0025a0 "}ol.lst-kix_hln5uguf3qqq-0{list-style-type:none}ol.lst-kix_hln5uguf3qqq-1{list-style-type:none}ol.lst-kix_hln5uguf3qqq-2{list-style-type:none}ol.lst-kix_hln5uguf3qqq-3{list-style-type:none}ol.lst-kix_hln5uguf3qqq-4{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-2.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-2 0}.lst-kix_hln5uguf3qqq-0>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-0}ol.lst-kix_hln5uguf3qqq-5{list-style-type:none}ol.lst-kix_hln5uguf3qqq-6{list-style-type:none}ol.lst-kix_hln5uguf3qqq-7{list-style-type:none}ol.lst-kix_hln5uguf3qqq-8{list-style-type:none}.lst-kix_i4lkh545s3dk-8>li:before{content:"\0025a0 "}ol.lst-kix_dxgqhjhnlsrk-8.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-8 0}.lst-kix_dxgqhjhnlsrk-4>li:before{content:"(" counter(lst-ctn-kix_dxgqhjhnlsrk-4,lower-latin) ") "}ul.lst-kix_7or0zemg5mr6-4{list-style-type:none}ol.lst-kix_hln5uguf3qqq-4.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-4 0}ul.lst-kix_7or0zemg5mr6-5{list-style-type:none}ul.lst-kix_7or0zemg5mr6-2{list-style-type:none}ul.lst-kix_7or0zemg5mr6-3{list-style-type:none}ul.lst-kix_7or0zemg5mr6-8{list-style-type:none}ul.lst-kix_7or0zemg5mr6-6{list-style-type:none}ul.lst-kix_7or0zemg5mr6-7{list-style-type:none}.lst-kix_7or0zemg5mr6-0>li:before{content:"\0025cf "}.lst-kix_dxgqhjhnlsrk-2>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-2,lower-roman) ") "}ul.lst-kix_7or0zemg5mr6-0{list-style-type:none}ul.lst-kix_7or0zemg5mr6-1{list-style-type:none}.lst-kix_dxgqhjhnlsrk-5>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-5}.lst-kix_hln5uguf3qqq-4>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-4}.lst-kix_7or0zemg5mr6-4>li:before{content:"\0025cb "}.lst-kix_7or0zemg5mr6-6>li:before{content:"\0025cf "}.lst-kix_dxgqhjhnlsrk-0>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-0,decimal) ") "}.lst-kix_7or0zemg5mr6-2>li:before{content:"\0025a0 "}ul.lst-kix_awzz6jhne7dj-0{list-style-type:none}.lst-kix_x1md2wd498rf-6>li:before{content:"\0025cf "}ul.lst-kix_awzz6jhne7dj-3{list-style-type:none}ul.lst-kix_awzz6jhne7dj-4{list-style-type:none}ul.lst-kix_awzz6jhne7dj-1{list-style-type:none}ul.lst-kix_awzz6jhne7dj-2{list-style-type:none}ul.lst-kix_awzz6jhne7dj-7{list-style-type:none}ul.lst-kix_awzz6jhne7dj-8{list-style-type:none}ul.lst-kix_awzz6jhne7dj-5{list-style-type:none}.lst-kix_x1md2wd498rf-4>li:before{content:"\0025cb "}ul.lst-kix_awzz6jhne7dj-6{list-style-type:none}.lst-kix_rd3fh31ar0ko-6>li:before{content:"\0025cf "}.lst-kix_rd3fh31ar0ko-4>li:before{content:"\0025cb "}.lst-kix_rd3fh31ar0ko-8>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-5>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-5}.lst-kix_x1md2wd498rf-8>li:before{content:"\0025a0 "}ul.lst-kix_i4lkh545s3dk-3{list-style-type:none}ul.lst-kix_i4lkh545s3dk-2{list-style-type:none}.lst-kix_zapj04isd5g3-5>li:before{content:"\0025a0 "}ul.lst-kix_i4lkh545s3dk-5{list-style-type:none}ul.lst-kix_i4lkh545s3dk-4{list-style-type:none}.lst-kix_rd3fh31ar0ko-0>li:before{content:"\0025cf "}ul.lst-kix_i4lkh545s3dk-7{list-style-type:none}.lst-kix_dxgqhjhnlsrk-3>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-3}ul.lst-kix_i4lkh545s3dk-6{list-style-type:none}.lst-kix_zapj04isd5g3-7>li:before{content:"\0025cb "}.lst-kix_h9wb9p9kfhen-0>li:before{content:"\0025cf "}ul.lst-kix_i4lkh545s3dk-8{list-style-type:none}.lst-kix_rd3fh31ar0ko-2>li:before{content:"\0025a0 "}.lst-kix_h9wb9p9kfhen-2>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-5>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-5,lower-roman) ". "}ul.lst-kix_r1xag6gnfr2m-1{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-0{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-3{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-2{list-style-type:none}ol.lst-kix_hln5uguf3qqq-2.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-2 0}ul.lst-kix_bod8qw4piq7-8{list-style-type:none}ul.lst-kix_bod8qw4piq7-7{list-style-type:none}.lst-kix_h9wb9p9kfhen-4>li:before{content:"\0025cb "}.lst-kix_h9wb9p9kfhen-8>li:before{content:"\0025a0 "}ul.lst-kix_bod8qw4piq7-6{list-style-type:none}ul.lst-kix_bod8qw4piq7-5{list-style-type:none}ul.lst-kix_bod8qw4piq7-4{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-8{list-style-type:none}ul.lst-kix_bod8qw4piq7-3{list-style-type:none}ul.lst-kix_bod8qw4piq7-2{list-style-type:none}.lst-kix_hln5uguf3qqq-7>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-7,lower-latin) ". "}ul.lst-kix_bod8qw4piq7-1{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-5{list-style-type:none}ul.lst-kix_bod8qw4piq7-0{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-4{list-style-type:none}ul.lst-kix_r1xag6gnfr2m-7{list-style-type:none}.lst-kix_h9wb9p9kfhen-6>li:before{content:"\0025cf "}ul.lst-kix_r1xag6gnfr2m-6{list-style-type:none}.lst-kix_7gq3ujenf0zs-0>li:before{content:"\0025cf "}.lst-kix_7gq3ujenf0zs-2>li:before{content:"\0025a0 "}.lst-kix_dxgqhjhnlsrk-4>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-4}.lst-kix_7gq3ujenf0zs-4>li:before{content:"\0025cb "}.lst-kix_7or0zemg5mr6-8>li:before{content:"\0025a0 "}.lst-kix_bod8qw4piq7-7>li:before{content:"\0025cb "}ol.lst-kix_hln5uguf3qqq-1.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-1 0}.lst-kix_7gq3ujenf0zs-8>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-3>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-3,decimal) ". "}.lst-kix_bod8qw4piq7-1>li:before{content:"\0025cb "}.lst-kix_bod8qw4piq7-5>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-1>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-1,lower-latin) ". "}.lst-kix_7gq3ujenf0zs-6>li:before{content:"\0025cf "}.lst-kix_bod8qw4piq7-3>li:before{content:"\0025cf "}.lst-kix_dxgqhjhnlsrk-0>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-0}ul.lst-kix_h9wb9p9kfhen-0{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-6.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-6 0}ul.lst-kix_h9wb9p9kfhen-7{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-8{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-5{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-6{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-3{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-4{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-1{list-style-type:none}ul.lst-kix_h9wb9p9kfhen-2{list-style-type:none}ol.lst-kix_hln5uguf3qqq-0.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-0 0}ol.lst-kix_dxgqhjhnlsrk-0{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-2{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-1{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-4{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-0.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-0 0}ol.lst-kix_dxgqhjhnlsrk-3{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-6{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-5{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-8{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-7{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-8{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-6{list-style-type:none}ol.lst-kix_hln5uguf3qqq-6.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-6 0}ul.lst-kix_7gq3ujenf0zs-7{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-4{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-5{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-2{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-3{list-style-type:none}ul.lst-kix_7gq3ujenf0zs-0{list-style-type:none}.lst-kix_zapj04isd5g3-4>li:before{content:"\0025cb "}ul.lst-kix_7gq3ujenf0zs-1{list-style-type:none}ol.lst-kix_dxgqhjhnlsrk-1.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-1 0}.lst-kix_zapj04isd5g3-3>li:before{content:"\0025cf "}.lst-kix_zapj04isd5g3-1>li:before{content:"\0025cb "}.lst-kix_zapj04isd5g3-2>li:before{content:"\0025a0 "}.lst-kix_zapj04isd5g3-0>li:before{content:"\0025cf "}.lst-kix_x1md2wd498rf-1>li:before{content:"\0025cb "}.lst-kix_x1md2wd498rf-3>li:before{content:"\0025cf "}.lst-kix_x1md2wd498rf-2>li:before{content:"\0025a0 "}ol.lst-kix_hln5uguf3qqq-5.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-5 0}.lst-kix_x1md2wd498rf-0>li:before{content:"\0025cf "}.lst-kix_hln5uguf3qqq-6>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-6}ul.lst-kix_x1md2wd498rf-0{list-style-type:none}ul.lst-kix_x1md2wd498rf-5{list-style-type:none}ul.lst-kix_x1md2wd498rf-6{list-style-type:none}ul.lst-kix_x1md2wd498rf-7{list-style-type:none}ul.lst-kix_x1md2wd498rf-8{list-style-type:none}.lst-kix_hln5uguf3qqq-3>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-3}ul.lst-kix_x1md2wd498rf-1{list-style-type:none}ul.lst-kix_x1md2wd498rf-2{list-style-type:none}ul.lst-kix_x1md2wd498rf-3{list-style-type:none}ul.lst-kix_x1md2wd498rf-4{list-style-type:none}.lst-kix_dxgqhjhnlsrk-2>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-2}.lst-kix_dxgqhjhnlsrk-8>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-8,lower-roman) ". "}.lst-kix_dxgqhjhnlsrk-6>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-6,decimal) ". "}.lst-kix_dxgqhjhnlsrk-7>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-7,lower-latin) ". "}.lst-kix_dxgqhjhnlsrk-1>li:before{content:"" counter(lst-ctn-kix_dxgqhjhnlsrk-1,lower-latin) ") "}.lst-kix_dxgqhjhnlsrk-5>li:before{content:"(" counter(lst-ctn-kix_dxgqhjhnlsrk-5,lower-roman) ") "}.lst-kix_7or0zemg5mr6-1>li:before{content:"\0025cb "}.lst-kix_dxgqhjhnlsrk-3>li:before{content:"(" counter(lst-ctn-kix_dxgqhjhnlsrk-3,decimal) ") "}.lst-kix_7or0zemg5mr6-5>li:before{content:"\0025a0 "}.lst-kix_7or0zemg5mr6-3>li:before{content:"\0025cf "}ol.lst-kix_dxgqhjhnlsrk-7.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-7 0}.lst-kix_x1md2wd498rf-7>li:before{content:"\0025cb "}.lst-kix_x1md2wd498rf-5>li:before{content:"\0025a0 "}.lst-kix_rd3fh31ar0ko-5>li:before{content:"\0025a0 "}.lst-kix_rd3fh31ar0ko-7>li:before{content:"\0025cb "}ul.lst-kix_ps5q64vwwpgt-7{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-8{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-5{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-6{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-3{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-4{list-style-type:none}.lst-kix_hln5uguf3qqq-2>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-2}ul.lst-kix_ps5q64vwwpgt-1{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-2{list-style-type:none}ul.lst-kix_ps5q64vwwpgt-0{list-style-type:none}.lst-kix_dxgqhjhnlsrk-6>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-6}.lst-kix_zapj04isd5g3-6>li:before{content:"\0025cf "}.lst-kix_h9wb9p9kfhen-1>li:before{content:"\0025cb "}.lst-kix_rd3fh31ar0ko-1>li:before{content:"\0025cb "}.lst-kix_rd3fh31ar0ko-3>li:before{content:"\0025cf "}.lst-kix_hln5uguf3qqq-8>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-8}.lst-kix_bod8qw4piq7-0>li:before{content:"\0025cf "}.lst-kix_h9wb9p9kfhen-3>li:before{content:"\0025cf "}.lst-kix_zapj04isd5g3-8>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-4>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-4,lower-latin) ". "}.lst-kix_hln5uguf3qqq-1>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-1}.lst-kix_h9wb9p9kfhen-5>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-6>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-6,decimal) ". "}.lst-kix_h9wb9p9kfhen-7>li:before{content:"\0025cb "}ol.lst-kix_dxgqhjhnlsrk-4.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-4 0}.lst-kix_hln5uguf3qqq-7>li{counter-increment:lst-ctn-kix_hln5uguf3qqq-7}.lst-kix_hln5uguf3qqq-8>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-8,lower-roman) ". "}.lst-kix_dxgqhjhnlsrk-7>li{counter-increment:lst-ctn-kix_dxgqhjhnlsrk-7}.lst-kix_7gq3ujenf0zs-1>li:before{content:"\0025cb "}.lst-kix_7gq3ujenf0zs-5>li:before{content:"\0025a0 "}.lst-kix_bod8qw4piq7-8>li:before{content:"\0025a0 "}li.li-bullet-0:before{margin-left:-18pt;white-space:nowrap;display:inline-block;min-width:18pt}ol.lst-kix_hln5uguf3qqq-7.start{counter-reset:lst-ctn-kix_hln5uguf3qqq-7 0}.lst-kix_7gq3ujenf0zs-3>li:before{content:"\0025cf "}.lst-kix_7or0zemg5mr6-7>li:before{content:"\0025cb "}.lst-kix_bod8qw4piq7-4>li:before{content:"\0025cb "}.lst-kix_bod8qw4piq7-6>li:before{content:"\0025cf "}.lst-kix_hln5uguf3qqq-2>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-2,lower-roman) ". "}ol.lst-kix_dxgqhjhnlsrk-5.start{counter-reset:lst-ctn-kix_dxgqhjhnlsrk-5 0}.lst-kix_bod8qw4piq7-2>li:before{content:"\0025a0 "}.lst-kix_hln5uguf3qqq-0>li:before{content:"" counter(lst-ctn-kix_hln5uguf3qqq-0,decimal) ". "}.lst-kix_7gq3ujenf0zs-7>li:before{content:"\0025cb "}ol{margin:0;padding:0}table td,table th{padding:0}.c32{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#e0e0e0;border-top-width:1pt;border-right-width:1pt;border-left-color:#e0e0e0;vertical-align:top;border-right-color:#e0e0e0;border-left-width:1pt;border-top-style:solid;background-color:#fafafa;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#e0e0e0;border-bottom-style:solid}.c29{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:155.4pt;border-top-color:#000000;border-bottom-style:solid}.c19{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:157.2pt;border-top-color:#000000;border-bottom-style:solid}.c18{padding-top:8pt;padding-bottom:0pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c13{padding-top:10pt;padding-bottom:0pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c1{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c14{background-color:#ffffff;color:#545454;text-decoration:none;vertical-align:baseline;font-size:11pt;font-style:italic}.c20{color:#545454;text-decoration:none;vertical-align:baseline;font-size:14pt;font-style:normal}.c10{color:#545454;text-decoration:none;vertical-align:baseline;font-size:10pt;font-style:normal}.c5{color:#545454;text-decoration:none;vertical-align:baseline;font-size:11pt;font-style:normal}.c39{font-size:10pt;font-family:"Courier New";color:#000000;font-weight:700}.c22{padding-top:0pt;padding-bottom:0pt;line-height:1.5;text-align:left}.c28{border-spacing:0;border-collapse:collapse;margin-right:auto}.c30{color:#545454;font-weight:700;font-size:18pt;font-family:"Arial"}.c9{padding-top:0pt;padding-bottom:0pt;line-height:1.0;text-align:left}.c2{font-size:10pt;font-family:"Courier New";color:#000000;font-weight:400}.c17{-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline;text-decoration-skip-ink:none}.c21{text-decoration:none;vertical-align:baseline;font-style:normal}.c0{border:1px solid black;margin:5px}.c33{font-weight:400;font-family:"Google Sans"}.c6{margin-left:36pt;padding-left:0pt}.c15{padding:0;margin:0}.c37{orphans:2;widows:2}.c38{max-width:468pt;padding:72pt 72pt 72pt 72pt}.c25{font-size:10pt;color:#3367d6}.c34{margin-left:72pt;padding-left:0pt}.c3{font-weight:400;font-family:"Arial"}.c35{color:inherit;text-decoration:inherit}.c23{font-size:10pt;color:#9c27b0}.c26{color:#000000;font-size:11pt}.c12{font-size:10pt;color:#616161}.c24{color:#545454;font-size:13pt}.c11{font-size:10pt;color:#c53929}.c7{font-weight:400;font-family:"Courier New"}.c27{background-color:#ffffff}.c8{color:#0d904f}.c4{height:11pt}.c31{font-style:italic}.c16{height:0pt}.c36{margin-left:36pt}.title{padding-top:0pt;color:#4285f4;font-size:24pt;padding-bottom:0pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.subtitle{padding-top:0pt;color:#999999;font-size:11pt;padding-bottom:10pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}li{color:#545454;font-size:11pt;font-family:"Google Sans"}p{margin:0;color:#545454;font-size:11pt;font-family:"Google Sans"}h1{padding-top:10pt;color:#545454;font-weight:700;font-size:18pt;padding-bottom:0pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h2{padding-top:10pt;color:#545454;font-size:14pt;padding-bottom:0pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h3{padding-top:8pt;color:#545454;font-size:13pt;padding-bottom:0pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h4{padding-top:8pt;color:#666666;font-weight:700;font-size:12pt;padding-bottom:0pt;font-family:"Google Sans";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h5{padding-top:8pt;-webkit-text-decoration-skip:none;color:#666666;text-decoration:underline;font-size:12pt;padding-bottom:0pt;line-height:1.5;page-break-after:avoid;text-decoration-skip-ink:none;font-family:"Google Sans";orphans:2;widows:2;text-align:left}h6{padding-top:8pt;color:#666666;font-size:11pt;padding-bottom:0pt;font-family:"Trebuchet MS";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}}This is part 5 of a 6-part series detailing a set of vulnerabilities found by Project Zero being exploited in the wild. To read the other parts of the series, see the introduction post.

Project Zero’s mission is to make 0-day hard. We often work with other companies to find and report security vulnerabilities, with the ultimate goal of advocating for structural security improvements in popular systems to help protect people everywhere.

/* latin */ @font-face { font-family: 'Consolas'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/l/font?kit=X7nm4bA-A_-9jbjWaza9xMk&skey=3d1eb1871fcc58a1&v=v20) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } @import url('https://themes.googleusercontent.com/fonts/css?kit=lhDjYqiy3mZ0x6ROQEUoUw'); .post-body{ul.lst-kix_wl1qmy9tv69d-1{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-0{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-8{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-7{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-6{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-5{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-4{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-3{list-style-type:none}ul.lst-kix_wl1qmy9tv69d-2{list-style-type:none}.lst-kix_vvah8cp3zgua-1>li:before{content:"\0025cb "}.lst-kix_kan00gftou8h-7>li:before{content:"\0025cb "}.lst-kix_a41x0ya2xyd3-6>li:before{content:"\0025cf "}.lst-kix_a41x0ya2xyd3-8>li:before{content:"\0025a0 "}.lst-kix_vvah8cp3zgua-0>li:before{content:"\0025cf "}.lst-kix_kan00gftou8h-4>li:before{content:"\0025cb "}.lst-kix_kan00gftou8h-8>li:before{content:"\0025a0 "}.lst-kix_a41x0ya2xyd3-3>li:before{content:"\0025cf "}.lst-kix_a41x0ya2xyd3-7>li:before{content:"\0025cb "}.lst-kix_a41x0ya2xyd3-4>li:before{content:"\0025cb "}.lst-kix_kan00gftou8h-5>li:before{content:"\0025a0 "}.lst-kix_kan00gftou8h-6>li:before{content:"\0025cf "}.lst-kix_a41x0ya2xyd3-5>li:before{content:"\0025a0 "}ul.lst-kix_h07r6gi9x3gp-0{list-style-type:none}.lst-kix_h07r6gi9x3gp-7>li:before{content:"\0025cb "}ul.lst-kix_40ztqamj21pm-1{list-style-type:none}ul.lst-kix_40ztqamj21pm-0{list-style-type:none}.lst-kix_vkloremw4n8w-2>li:before{content:"\0025a0 "}.lst-kix_h07r6gi9x3gp-6>li:before{content:"\0025cf "}.lst-kix_a41x0ya2xyd3-0>li:before{content:"\0025cf "}.lst-kix_h07r6gi9x3gp-5>li:before{content:"\0025a0 "}.lst-kix_vkloremw4n8w-3>li:before{content:"\0025cf "}.lst-kix_vkloremw4n8w-4>li:before{content:"\0025cb "}.lst-kix_h07r6gi9x3gp-3>li:before{content:"\0025cf "}ul.lst-kix_h07r6gi9x3gp-8{list-style-type:none}ul.lst-kix_h07r6gi9x3gp-7{list-style-type:none}.lst-kix_vkloremw4n8w-5>li:before{content:"\0025a0 "}.lst-kix_vkloremw4n8w-6>li:before{content:"\0025cf "}.lst-kix_h07r6gi9x3gp-2>li:before{content:"\0025a0 "}.lst-kix_h07r6gi9x3gp-4>li:before{content:"\0025cb "}ul.lst-kix_h07r6gi9x3gp-6{list-style-type:none}.lst-kix_a41x0ya2xyd3-2>li:before{content:"\0025a0 "}ul.lst-kix_h07r6gi9x3gp-5{list-style-type:none}ul.lst-kix_h07r6gi9x3gp-4{list-style-type:none}ul.lst-kix_h07r6gi9x3gp-3{list-style-type:none}ul.lst-kix_h07r6gi9x3gp-2{list-style-type:none}.lst-kix_a41x0ya2xyd3-1>li:before{content:"\0025cb "}ul.lst-kix_h07r6gi9x3gp-1{list-style-type:none}.lst-kix_vkloremw4n8w-7>li:before{content:"\0025cb "}.lst-kix_vkloremw4n8w-8>li:before{content:"\0025a0 "}ul.lst-kix_e7a7d17rpo44-7{list-style-type:none}ul.lst-kix_vkloremw4n8w-4{list-style-type:none}ul.lst-kix_e7a7d17rpo44-6{list-style-type:none}ul.lst-kix_vkloremw4n8w-3{list-style-type:none}ul.lst-kix_vkloremw4n8w-6{list-style-type:none}ul.lst-kix_e7a7d17rpo44-8{list-style-type:none}ul.lst-kix_vkloremw4n8w-5{list-style-type:none}ul.lst-kix_e7a7d17rpo44-3{list-style-type:none}ul.lst-kix_vkloremw4n8w-8{list-style-type:none}ul.lst-kix_e7a7d17rpo44-2{list-style-type:none}ul.lst-kix_vkloremw4n8w-7{list-style-type:none}ul.lst-kix_e7a7d17rpo44-5{list-style-type:none}ul.lst-kix_e7a7d17rpo44-4{list-style-type:none}.lst-kix_h07r6gi9x3gp-8>li:before{content:"\0025a0 "}ul.lst-kix_e7a7d17rpo44-1{list-style-type:none}ul.lst-kix_e7a7d17rpo44-0{list-style-type:none}.lst-kix_e7a7d17rpo44-1>li:before{content:"\0025cb "}ul.lst-kix_vkloremw4n8w-0{list-style-type:none}.lst-kix_kan00gftou8h-0>li:before{content:"\0025cf "}ul.lst-kix_vkloremw4n8w-2{list-style-type:none}.lst-kix_e7a7d17rpo44-2>li:before{content:"\0025a0 "}ul.lst-kix_vkloremw4n8w-1{list-style-type:none}.lst-kix_kan00gftou8h-3>li:before{content:"\0025cf "}.lst-kix_e7a7d17rpo44-3>li:before{content:"\0025cf "}.lst-kix_e7a7d17rpo44-5>li:before{content:"\0025a0 "}.lst-kix_kan00gftou8h-1>li:before{content:"\0025cb "}.lst-kix_kan00gftou8h-2>li:before{content:"\0025a0 "}.lst-kix_e7a7d17rpo44-4>li:before{content:"\0025cb "}.lst-kix_e7a7d17rpo44-7>li:before{content:"\0025cb "}ul.lst-kix_kan00gftou8h-7{list-style-type:none}ul.lst-kix_kan00gftou8h-6{list-style-type:none}ul.lst-kix_kan00gftou8h-8{list-style-type:none}.lst-kix_e7a7d17rpo44-6>li:before{content:"\0025cf "}ul.lst-kix_kan00gftou8h-3{list-style-type:none}ul.lst-kix_kan00gftou8h-2{list-style-type:none}ul.lst-kix_kan00gftou8h-5{list-style-type:none}ul.lst-kix_kan00gftou8h-4{list-style-type:none}ul.lst-kix_kan00gftou8h-1{list-style-type:none}ul.lst-kix_kan00gftou8h-0{list-style-type:none}.lst-kix_e7a7d17rpo44-0>li:before{content:"\0025cf "}.lst-kix_e7a7d17rpo44-8>li:before{content:"\0025a0 "}ul.lst-kix_vvah8cp3zgua-5{list-style-type:none}ul.lst-kix_vvah8cp3zgua-6{list-style-type:none}.lst-kix_h07r6gi9x3gp-0>li:before{content:"\0025cf "}ul.lst-kix_vvah8cp3zgua-3{list-style-type:none}ul.lst-kix_vvah8cp3zgua-4{list-style-type:none}.lst-kix_h07r6gi9x3gp-1>li:before{content:"\0025cb "}ul.lst-kix_vvah8cp3zgua-7{list-style-type:none}ul.lst-kix_vvah8cp3zgua-8{list-style-type:none}ul.lst-kix_40ztqamj21pm-8{list-style-type:none}ul.lst-kix_40ztqamj21pm-7{list-style-type:none}ul.lst-kix_40ztqamj21pm-6{list-style-type:none}ul.lst-kix_40ztqamj21pm-5{list-style-type:none}ul.lst-kix_40ztqamj21pm-4{list-style-type:none}ul.lst-kix_40ztqamj21pm-3{list-style-type:none}ul.lst-kix_40ztqamj21pm-2{list-style-type:none}.lst-kix_vkloremw4n8w-1>li:before{content:"\0025cb "}.lst-kix_vkloremw4n8w-0>li:before{content:"\0025cf "}ul.lst-kix_vvah8cp3zgua-1{list-style-type:none}ul.lst-kix_vvah8cp3zgua-2{list-style-type:none}ul.lst-kix_vvah8cp3zgua-0{list-style-type:none}.lst-kix_vvah8cp3zgua-2>li:before{content:"\0025a0 "}.lst-kix_vvah8cp3zgua-3>li:before{content:"\0025cf "}.lst-kix_40ztqamj21pm-1>li:before{content:"\0025cb "}.lst-kix_vvah8cp3zgua-4>li:before{content:"\0025cb "}.lst-kix_vvah8cp3zgua-6>li:before{content:"\0025cf "}.lst-kix_40ztqamj21pm-2>li:before{content:"\0025a0 "}.lst-kix_vvah8cp3zgua-5>li:before{content:"\0025a0 "}.lst-kix_vvah8cp3zgua-8>li:before{content:"\0025a0 "}ul.lst-kix_a41x0ya2xyd3-8{list-style-type:none}ul.lst-kix_a41x0ya2xyd3-7{list-style-type:none}ul.lst-kix_a41x0ya2xyd3-6{list-style-type:none}.lst-kix_wl1qmy9tv69d-8>li:before{content:"\0025a0 "}ul.lst-kix_a41x0ya2xyd3-5{list-style-type:none}.lst-kix_40ztqamj21pm-0>li:before{content:"\0025cf "}.lst-kix_vvah8cp3zgua-7>li:before{content:"\0025cb "}ul.lst-kix_a41x0ya2xyd3-4{list-style-type:none}.lst-kix_wl1qmy9tv69d-7>li:before{content:"\0025cb "}ul.lst-kix_a41x0ya2xyd3-3{list-style-type:none}ul.lst-kix_a41x0ya2xyd3-2{list-style-type:none}ul.lst-kix_a41x0ya2xyd3-1{list-style-type:none}ul.lst-kix_a41x0ya2xyd3-0{list-style-type:none}.lst-kix_wl1qmy9tv69d-5>li:before{content:"\0025a0 "}.lst-kix_wl1qmy9tv69d-6>li:before{content:"\0025cf "}.lst-kix_wl1qmy9tv69d-3>li:before{content:"\0025cf "}.lst-kix_wl1qmy9tv69d-0>li:before{content:"\0025cf "}.lst-kix_wl1qmy9tv69d-4>li:before{content:"\0025cb "}.lst-kix_40ztqamj21pm-8>li:before{content:"\0025a0 "}.lst-kix_wl1qmy9tv69d-1>li:before{content:"\0025cb "}li.li-bullet-0:before{margin-left:-18pt;white-space:nowrap;display:inline-block;min-width:18pt}.lst-kix_wl1qmy9tv69d-2>li:before{content:"\0025a0 "}.lst-kix_40ztqamj21pm-3>li:before{content:"\0025cf "}.lst-kix_40ztqamj21pm-5>li:before{content:"\0025a0 "}.lst-kix_40ztqamj21pm-4>li:before{content:"\0025cb "}.lst-kix_40ztqamj21pm-7>li:before{content:"\0025cb "}.lst-kix_40ztqamj21pm-6>li:before{content:"\0025cf "}ol{margin:0;padding:0}table td,table th{padding:0}.c11{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:104.2pt;border-top-color:#000000;border-bottom-style:solid}.c3{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:105.8pt;border-top-color:#000000;border-bottom-style:solid}.c15{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:62.2pt;border-top-color:#000000;border-bottom-style:solid}.c2{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:50.2pt;border-top-color:#000000;border-bottom-style:solid}.c12{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:84.8pt;border-top-color:#000000;border-bottom-style:solid}.c8{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:105pt;border-top-color:#000000;border-bottom-style:solid}.c18{-webkit-text-decoration-skip:none;color:#00796b;font-weight:400;text-decoration:line-through;vertical-align:baseline;text-decoration-skip-ink:none;font-size:11pt;font-family:"Arial";font-style:normal}.c6{margin-left:36pt;padding-top:0pt;padding-left:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c5{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left;height:11pt}.c20{padding-top:20pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c0{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial";font-style:normal}.c1{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:20pt;font-family:"Arial";font-style:normal}.c4{padding-top:0pt;padding-bottom:0pt;line-height:1.0;orphans:2;widows:2;text-align:left}.c9{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c16{text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline}.c23{border-spacing:0;border-collapse:collapse;margin-right:auto}.c10{background-color:#ffffff;max-width:468pt;padding:72pt 72pt 72pt 72pt}.c22{font-family:Consolas,"Courier New";color:#0d904f;font-weight:400}.c7{padding:0;margin:0}.c13{color:inherit;text-decoration:inherit}.c21{height:11pt}.c14{height:0pt}.c19{margin-left:36pt}.c17{font-style:italic}.title{padding-top:0pt;color:#000000;font-size:26pt;padding-bottom:3pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.subtitle{padding-top:0pt;color:#666666;font-size:15pt;padding-bottom:16pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}li{color:#000000;font-size:11pt;font-family:"Arial"}p{margin:0;color:#000000;font-size:11pt;font-family:"Arial"}h1{padding-top:20pt;color:#000000;font-size:20pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h2{padding-top:18pt;color:#000000;font-size:16pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h3{padding-top:16pt;color:#434343;font-size:14pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h4{padding-top:14pt;color:#666666;font-size:12pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h5{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h6{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}} Posted by Maddie Stone, Project Zero

/* latin */ @font-face { font-family: 'Consolas'; font-style: normal; font-weight: 400; src: url(https://fonts.gstatic.com/l/font?kit=X7nm4bA-A_-9jbjWaza9xMk&skey=3d1eb1871fcc58a1&v=v20) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } /* latin */ @font-face { font-family: 'Consolas'; font-style: normal; font-weight: 700; src: url(https://fonts.gstatic.com/l/font?kit=X7nh4bA-A_-9jbjWaz4G4dzmOg0&skey=ed6f0b47e729851b&v=v20) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD; } @import url('https://themes.googleusercontent.com/fonts/css?kit=cGvuclDC_Z1vE_cnVEU6Ae_NZQ7StBcqH_vXVqoPMX0'); .post-body{.lst-kix_r9pow2tp8cv0-3>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-3}ol.lst-kix_r9pow2tp8cv0-8.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-8 0}ol.lst-kix_rh2sjnt7clnl-5.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-5 0}.lst-kix_r9pow2tp8cv0-8>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-8,lower-roman) ". "}ol.lst-kix_r9pow2tp8cv0-5.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-5 0}ol.lst-kix_rh2sjnt7clnl-2.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-2 0}.lst-kix_xcgzvmnt5e4b-8>li:before{content:"\0025a0 "}.lst-kix_r9pow2tp8cv0-4>li:before{content:"(" counter(lst-ctn-kix_r9pow2tp8cv0-4,lower-latin) ") "}.lst-kix_r9pow2tp8cv0-6>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-6,decimal) ". "}.lst-kix_r9pow2tp8cv0-3>li:before{content:"(" counter(lst-ctn-kix_r9pow2tp8cv0-3,decimal) ") "}.lst-kix_r9pow2tp8cv0-7>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-7,lower-latin) ". "}.lst-kix_rh2sjnt7clnl-0>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-0}.lst-kix_r9pow2tp8cv0-4>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-4}ol.lst-kix_rh2sjnt7clnl-8.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-8 0}.lst-kix_r9pow2tp8cv0-5>li:before{content:"(" counter(lst-ctn-kix_r9pow2tp8cv0-5,lower-roman) ") "}.lst-kix_ir94vkdxrs7o-0>li:before{content:"\0025cf "}.lst-kix_ir94vkdxrs7o-2>li:before{content:"\0025a0 "}ul.lst-kix_ir94vkdxrs7o-0{list-style-type:none}ul.lst-kix_ir94vkdxrs7o-1{list-style-type:none}.lst-kix_ir94vkdxrs7o-3>li:before{content:"\0025cf "}ul.lst-kix_ir94vkdxrs7o-2{list-style-type:none}ul.lst-kix_ir94vkdxrs7o-3{list-style-type:none}ul.lst-kix_ir94vkdxrs7o-4{list-style-type:none}ul.lst-kix_ir94vkdxrs7o-5{list-style-type:none}.lst-kix_r9pow2tp8cv0-0>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-0,decimal) ") "}.lst-kix_r9pow2tp8cv0-2>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-2,lower-roman) ") "}ul.lst-kix_ir94vkdxrs7o-6{list-style-type:none}.lst-kix_r9pow2tp8cv0-5>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-5}ul.lst-kix_ir94vkdxrs7o-7{list-style-type:none}ul.lst-kix_ir94vkdxrs7o-8{list-style-type:none}.lst-kix_ir94vkdxrs7o-1>li:before{content:"\0025cb "}.lst-kix_r9pow2tp8cv0-1>li:before{content:"" counter(lst-ctn-kix_r9pow2tp8cv0-1,lower-latin) ") "}.lst-kix_rh2sjnt7clnl-1>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-1}.lst-kix_r9pow2tp8cv0-2>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-2}ol.lst-kix_r9pow2tp8cv0-2.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-2 0}.lst-kix_wa1quvbznvvl-0>li:before{content:"\0025cf "}.lst-kix_wa1quvbznvvl-1>li:before{content:"\0025cb "}.lst-kix_r9pow2tp8cv0-0>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-0}ol.lst-kix_r9pow2tp8cv0-3.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-3 0}.lst-kix_rh2sjnt7clnl-0>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-0,decimal) ") "}.lst-kix_rh2sjnt7clnl-1>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-1,lower-latin) ") "}.lst-kix_r9pow2tp8cv0-6>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-6}ul.lst-kix_xcgzvmnt5e4b-8{list-style-type:none}.lst-kix_wa1quvbznvvl-2>li:before{content:"\0025a0 "}.lst-kix_rh2sjnt7clnl-2>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-2}.lst-kix_rh2sjnt7clnl-3>li:before{content:"(" counter(lst-ctn-kix_rh2sjnt7clnl-3,decimal) ") "}.lst-kix_wa1quvbznvvl-4>li:before{content:"\0025cb "}.lst-kix_wa1quvbznvvl-5>li:before{content:"\0025a0 "}.lst-kix_wa1quvbznvvl-3>li:before{content:"\0025cf "}.lst-kix_rh2sjnt7clnl-2>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-2,lower-roman) ") "}.lst-kix_ir94vkdxrs7o-8>li:before{content:"\0025a0 "}ol.lst-kix_rh2sjnt7clnl-3.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-3 0}.lst-kix_ir94vkdxrs7o-6>li:before{content:"\0025cf "}.lst-kix_ir94vkdxrs7o-7>li:before{content:"\0025cb "}.lst-kix_ir94vkdxrs7o-4>li:before{content:"\0025cb "}.lst-kix_ir94vkdxrs7o-5>li:before{content:"\0025a0 "}ol.lst-kix_r9pow2tp8cv0-4.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-4 0}.lst-kix_rh2sjnt7clnl-8>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-8,lower-roman) ". "}.lst-kix_wa1quvbznvvl-8>li:before{content:"\0025a0 "}.lst-kix_wa1quvbznvvl-6>li:before{content:"\0025cf "}.lst-kix_rh2sjnt7clnl-7>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-7,lower-latin) ". "}.lst-kix_rh2sjnt7clnl-8>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-8}.lst-kix_rh2sjnt7clnl-4>li:before{content:"(" counter(lst-ctn-kix_rh2sjnt7clnl-4,lower-latin) ") "}.lst-kix_rh2sjnt7clnl-5>li:before{content:"(" counter(lst-ctn-kix_rh2sjnt7clnl-5,lower-roman) ") "}.lst-kix_rh2sjnt7clnl-5>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-5}.lst-kix_wa1quvbznvvl-7>li:before{content:"\0025cb "}.lst-kix_rh2sjnt7clnl-6>li:before{content:"" counter(lst-ctn-kix_rh2sjnt7clnl-6,decimal) ". "}ol.lst-kix_rh2sjnt7clnl-0{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-1{list-style-type:none}.lst-kix_r9pow2tp8cv0-8>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-8}ol.lst-kix_r9pow2tp8cv0-1.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-1 0}.lst-kix_z1i3uqhq0nom-7>li:before{content:"\0025cb "}.lst-kix_z1i3uqhq0nom-8>li:before{content:"\0025a0 "}ul.lst-kix_wa1quvbznvvl-4{list-style-type:none}ul.lst-kix_wa1quvbznvvl-5{list-style-type:none}ul.lst-kix_wa1quvbznvvl-6{list-style-type:none}ul.lst-kix_wa1quvbznvvl-7{list-style-type:none}ul.lst-kix_wa1quvbznvvl-0{list-style-type:none}.lst-kix_rh2sjnt7clnl-6>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-6}ul.lst-kix_wa1quvbznvvl-1{list-style-type:none}ul.lst-kix_wa1quvbznvvl-2{list-style-type:none}ul.lst-kix_wa1quvbznvvl-3{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-1.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-1 0}ul.lst-kix_wa1quvbznvvl-8{list-style-type:none}.lst-kix_rh2sjnt7clnl-4>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-4}ul.lst-kix_xcgzvmnt5e4b-3{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-2{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-1{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-4.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-4 0}ul.lst-kix_xcgzvmnt5e4b-0{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-7{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-6{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-5{list-style-type:none}ul.lst-kix_xcgzvmnt5e4b-4{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-0.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-0 0}ol.lst-kix_rh2sjnt7clnl-7.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-7 0}ol.lst-kix_r9pow2tp8cv0-5{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-6{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-7{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-8{list-style-type:none}.lst-kix_rh2sjnt7clnl-7>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-7}ol.lst-kix_r9pow2tp8cv0-6.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-6 0}.lst-kix_r9pow2tp8cv0-7>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-7}.lst-kix_r9pow2tp8cv0-1>li{counter-increment:lst-ctn-kix_r9pow2tp8cv0-1}.lst-kix_rh2sjnt7clnl-3>li{counter-increment:lst-ctn-kix_rh2sjnt7clnl-3}ol.lst-kix_rh2sjnt7clnl-6.start{counter-reset:lst-ctn-kix_rh2sjnt7clnl-6 0}.lst-kix_xcgzvmnt5e4b-0>li:before{content:"\0025cf "}.lst-kix_xcgzvmnt5e4b-1>li:before{content:"\0025cb "}.lst-kix_z1i3uqhq0nom-1>li:before{content:"\0025cb "}.lst-kix_z1i3uqhq0nom-3>li:before{content:"\0025cf "}.lst-kix_xcgzvmnt5e4b-2>li:before{content:"\0025a0 "}.lst-kix_z1i3uqhq0nom-2>li:before{content:"\0025a0 "}.lst-kix_z1i3uqhq0nom-6>li:before{content:"\0025cf "}.lst-kix_z1i3uqhq0nom-5>li:before{content:"\0025a0 "}li.li-bullet-0:before{margin-left:-18pt;white-space:nowrap;display:inline-block;min-width:18pt}.lst-kix_xcgzvmnt5e4b-7>li:before{content:"\0025cb "}ol.lst-kix_r9pow2tp8cv0-0.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-0 0}.lst-kix_z1i3uqhq0nom-4>li:before{content:"\0025cb "}ol.lst-kix_r9pow2tp8cv0-1{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-2{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-2{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-3{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-3{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-4{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-4{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-5{list-style-type:none}.lst-kix_xcgzvmnt5e4b-6>li:before{content:"\0025cf "}ul.lst-kix_z1i3uqhq0nom-8{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-6{list-style-type:none}ul.lst-kix_z1i3uqhq0nom-7{list-style-type:none}ol.lst-kix_rh2sjnt7clnl-7{list-style-type:none}.lst-kix_xcgzvmnt5e4b-5>li:before{content:"\0025a0 "}ol.lst-kix_rh2sjnt7clnl-8{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-0{list-style-type:none}.lst-kix_xcgzvmnt5e4b-4>li:before{content:"\0025cb "}ul.lst-kix_z1i3uqhq0nom-4{list-style-type:none}ul.lst-kix_z1i3uqhq0nom-3{list-style-type:none}ol.lst-kix_r9pow2tp8cv0-7.start{counter-reset:lst-ctn-kix_r9pow2tp8cv0-7 0}ul.lst-kix_z1i3uqhq0nom-6{list-style-type:none}ul.lst-kix_z1i3uqhq0nom-5{list-style-type:none}ul.lst-kix_z1i3uqhq0nom-0{list-style-type:none}.lst-kix_xcgzvmnt5e4b-3>li:before{content:"\0025cf "}ul.lst-kix_z1i3uqhq0nom-2{list-style-type:none}.lst-kix_z1i3uqhq0nom-0>li:before{content:"\0025cf "}ul.lst-kix_z1i3uqhq0nom-1{list-style-type:none}ol{margin:0;padding:0}table td,table th{padding:0}.c28{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#e0e0e0;border-top-width:1pt;border-right-width:1pt;border-left-color:#e0e0e0;vertical-align:top;border-right-color:#e0e0e0;border-left-width:1pt;border-top-style:solid;background-color:#fafafa;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#e0e0e0;border-bottom-style:solid}.c30{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:174.8pt;border-top-color:#000000;border-bottom-style:solid}.c32{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:137.2pt;border-top-color:#000000;border-bottom-style:solid}.c12{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:156pt;border-top-color:#000000;border-bottom-style:solid}.c38{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#000000;border-bottom-style:solid}.c9{padding-top:20pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;text-align:left}.c7{padding-top:16pt;padding-bottom:4pt;line-height:1.5;page-break-after:avoid;text-align:left}.c42{padding-top:0pt;padding-bottom:16pt;line-height:1.5;page-break-after:avoid;text-align:left}.c36{padding-top:18pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;text-align:left}.c37{-webkit-text-decoration-skip:none;text-decoration:underline;vertical-align:baseline;text-decoration-skip-ink:none;font-style:normal}.c17{border-spacing:0;border-collapse:collapse;margin-right:auto}.c2{font-size:10pt;font-family:Consolas,"Courier New";color:#000000;font-weight:400}.c11{color:#000000;font-weight:400;font-size:11pt;font-family:"Arial"}.c27{color:#000000;font-weight:400;font-size:20pt;font-family:"Arial"}.c33{color:#000000;font-weight:400;font-size:16pt;font-family:"Arial"}.c8{font-size:10pt;font-family:Consolas,"Courier New";color:#3367d6;font-weight:400}.c0{padding-top:0pt;padding-bottom:0pt;line-height:1.5;text-align:left}.c5{text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline}.c18{font-size:10pt;font-family:Consolas,"Courier New";color:#455a64;font-weight:400}.c1{font-size:10pt;font-family:Consolas,"Courier New";color:#616161;font-weight:400}.c16{color:#434343;font-weight:400;font-size:14pt;font-family:"Arial"}.c46{color:#666666;font-weight:400;font-size:15pt;font-family:"Arial"}.c34{font-size:10pt;font-family:Consolas,"Courier New";color:#0f9d58;font-weight:400}.c20{font-size:10pt;font-family:Consolas,"Courier New";color:#c53929;font-weight:400}.c6{font-size:10pt;font-family:Consolas,"Courier New";color:#9c27b0;font-weight:400}.c25{padding-top:0pt;padding-bottom:0pt;line-height:1.0;text-align:left}.c29{font-size:10pt;font-family:Consolas,"Courier New";color:#000000}.c44{font-size:10pt;font-family:Consolas,"Courier New";color:#9c27b0}.c24{font-size:10pt;font-family:Consolas,"Courier New";color:#3367d6}.c40{-webkit-text-decoration-skip:none;text-decoration:underline;text-decoration-skip-ink:none}.c43{color:#000000;font-size:11pt;font-family:"Arial"}.c39{font-size:10pt;font-family:Consolas,"Courier New";color:#616161}.c45{background-color:#ffffff;max-width:468pt;padding:72pt 72pt 72pt 72pt}.c23{font-family:Consolas,"Courier New";color:#0d904f;font-weight:400}.c4{text-decoration:none;vertical-align:baseline;font-style:normal}.c22{margin-left:36pt;padding-left:0pt}.c3{orphans:2;widows:2}.c41{padding:0;margin:0}.c21{color:inherit;text-decoration:inherit}.c13{height:11pt}.c10{background-color:#ea9999}.c31{font-style:italic}.c15{background-color:#ffff00}.c19{font-weight:700}.c14{background-color:#b6d7a8}.c26{height:0pt}.c35{height:21pt}.title{padding-top:0pt;color:#000000;font-size:26pt;padding-bottom:3pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.subtitle{padding-top:0pt;color:#666666;font-size:15pt;padding-bottom:16pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}li{color:#000000;font-size:11pt;font-family:"Arial"}p{margin:0;color:#000000;font-size:11pt;font-family:"Arial"}h1{padding-top:20pt;color:#000000;font-size:20pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h2{padding-top:18pt;color:#000000;font-size:16pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h3{padding-top:16pt;color:#434343;font-size:14pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h4{padding-top:14pt;color:#666666;font-size:12pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h5{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h6{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}}A Year in Review of 0-days Exploited In-The-Wild in 2020