@ProjectZeroBugs

A bot that posts the latest blog posts and disclosures from Google's Project Zero

bugs.chromium.org/p/project-zero/issues/list?can=1&redir=1
Joined February 2016
  • Tweets1.8K
  • Following0
  • Followers37.6K
VirtualBox: COM RPC Interface Code Injection Host (Insufficient Fix) EoP project-zero.issues.chromium…
2
12
2,700
VirtualBox: VBoxWDDM VidPnSourceId Kernel Memory Corruption EoP project-zero.issues.chromium…
1
10
2,660
VirtualBox: OnSerialPortChange COM Object Interop Process Hardening Bypass EoP project-zero.issues.chromium…
1
7
2,015
VirtualBox: IDispatch COM Object Interop Process Hardening Bypass EoP project-zero.issues.chromium…
5
27
3,262
VirtualBox: .NET FlatImageLayout Process Hardening Bypass EoP project-zero.issues.chromium…
1
9
2,335
Samsung libsubextractor.so: Heap Buffer Overflow (OOB Write) in Subtitle Charset Conversion (SubtitleSource::read) project-zero.issues.chromium…
2
62
6,045
Samsung: libimagecodec.quram.so Out-of-Bounds Write in Progressive JPEG Inverse-DCT from a Scan/Frame Component-Index Mismatch project-zero.issues.chromium…
3
20
3,873
Samsung: libimagecodec.quram.so Heap Buffer Overflow in DNG Uncompressed Tile Decoding (QuramDngReadImage::readUncompressed) project-zero.issues.chromium…
5
44
5,322
How to fix a bug in a fix projectzero.google/2026/10/e…

How to fix a bug in a fix

Project Zero often works with software vendors to remediate the vulnerabilities we report and pro...

projectzero.google
7
53
6,154
Samsung sgpu: sgpu_gem_create() calls sgpu_swap_add_bo() on dangling BO project-zero.issues.chromium…
7
1
32
5,593
Windows Exploitation Techniques: Dangling COM Object Registrations projectzero.google/2026/09/w…

Windows Exploitation Techniques: Dangling COM Object Registrations

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...

projectzero.google
47
2
218
21,317
Windows: CrossDevice Dangling COM Registration Incomplete Fix EoP project-zero.issues.chromium…
1
6
22
4,306
Testing race conditions with memory access tracing and stack-based delay injection projectzero.google/2026/09/m…

Testing race conditions with memory access tracing and stack-based delay injection

Many security bugs are race conditions, where multi-threaded execution has to occur with the righ...

projectzero.google
1
13
74
6,920
PowerVR: PVRSRV_MEMALLOCFLAG_OS_LINUX_PREFER_CMA PMR allocations with a large page size causes page allocator corruption project-zero.issues.chromium…
4
1
24
5,391
Linux: fork() failure path tries to clean up BPF task storage that was never initialized, leading to UAF project-zero.issues.chromium…
6
1
63
6,565
aoc: Type Confusion in aoc_unlocked_ioctl_handle_ion_fd project-zero.issues.chromium…
2
10
4,483
LWIS kernel driver OOB write in lwis_io_buffer_write project-zero.issues.chromium…
3
18
4,518
fuse: uninitialized folio read via FUSE_NOTIFY_RETRIEVE on !uptodate pages project-zero.issues.chromium…
1
8
3,920
Linux 7.0: vfs_open_tree(OPEN_TREE_NAMESPACE) accepts regular files, so cwd can be a regular file project-zero.issues.chromium…
1
1
13
5,278
Pixel Codec3P VPU driver: lifetime issues with fw_debug_buf project-zero.issues.chromium…
7
3,881
Load more