Zero Day Initiative — Blog

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Thanksgiving Treat: Easy-as-Pie Windows 7 Secure Desktop Escalation of Privilege

November 19, 2019
Microsoft, Windows, Research, UAC

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2019-0801: Microsoft Office Uri Hyperlink Hijinks

September 24, 2019
Microsoft, Office, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Exploiting the Windows Task Scheduler Through CVE-2019-1069

June 11, 2019
Microsoft, Exploit, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

RCE Without Native Code: Exploitation of a Write-What-Where in Internet Explorer

May 21, 2019
Microsoft, Internet Explorer, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2019-0726: An RCE Vulnerability in the Windows 10 DHCP Client

April 25, 2019
Microsoft, Windows, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Finding Unicorns: When the C++ Compiler Writes the Vuln

February 28, 2019
Microsoft, Visual Studio, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Seeing Double: Exploiting a Blind Spot in MemGC

December 17, 2018
Microsoft, Top 5, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution

October 18, 2018
Internet Explorer, Microsoft, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

Floating-Poison Math in Chakra

August 22, 2018
Chakra, JavaScript, Research

Pwn2Own Automotive 2025 - Day Three and Final Results

Blog post

It’s Time to Terminate the Terminator

May 15, 2018
VBScript, Research, Microsoft