THE WINDOWS REGISTRY ADVENTURE #1: INTRODUCTION AND RESEARCH RESULTS

Summary from the TLDR InfoSec newsletter

In this two-part series of blog posts, Google Project Zero details how it audited the Windows Registry for bugs over a 20-month period, resulting in 50 CVEs filed and fixed by Microsoft. The research led to the discovery of various memory corruption vulnerabilities with different exploitability levels. Upcoming blog posts will delve into practical exploitation techniques using registry vulnerabilities.