A year of Windows kernel font fuzzing #2: the techniques

Part one of a series on a year of at-scale fuzzing that found 16 vulnerabilities in Windows kernel TrueType and OpenType font handling, presenting results and bug collision case studies.

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.

Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.

A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.

A Project Zero post on fuzzing Windows' Uniscribe font library, which yielded 29 CVEs fixed in March 2017, covering the library's history and the fuzzing approach.

A Project Zero post on attacking NVIDIA's Windows kernel graphics driver, covering several of the 16 vulnerabilities found during this GPU attack surface research.