Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING
VirtualBox 3D Acceleration: An accelerated attack surface
Blog post

VirtualBox 3D Acceleration: An accelerated attack surface

Floating-Poison Math in Chakra
Blog post

Floating-Poison Math in Chakra

Throwing Shade: Analysis of a Foxit Integer Overflow
Blog post

Throwing Shade: Analysis of a Foxit Integer Overflow

Analyzing an Integer Overflow in Bitdefender AV: Part 2 – The Exploit
Blog post

Analyzing an Integer Overflow in Bitdefender AV: Part 2 – The Exploit

Analyzing an Integer Overflow in Bitdefender AV: Part 1 – The Vulnerability
Blog post

Analyzing an Integer Overflow in Bitdefender AV: Part 1 – The Vulnerability

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface
Blog post

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface

Malicious Intent using Adobe Acrobat's OCG setIntent
Blog post

Malicious Intent using Adobe Acrobat's OCG setIntent

It’s Time to Terminate the Terminator
Blog post

It’s Time to Terminate the Terminator

Running with Scissors: The Dangers of Cutting and Pasting Sample Code
Blog post

Running with Scissors: The Dangers of Cutting and Pasting Sample Code

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion
Blog post

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion