Mark Vincent Yason

We had a lot of fun handing out our first-ever #Vanguard Awards. If you couldn't be there, we've updated our blog with all the winners. Check it out at zerodayinitiative.com/blog/2024/8/1/…

In a new guest blog, @MarkYason talks about some of the #Adobe #Reader vulns he reported. Two of these bugs, in particular, CVE-2021-28632 and CVE-2021-39840, are related UAF bugs even though they were patched months apart. Read the details at zerodayinitiative.com/blog/2021/10/2…

Finding an info leak is a key step to a successful exploit chain. @mrpowell details one such leak in #Adobe #Reader that can disclose the base address of Annots.api. Originally reported by @MarkYason, the details of this stellar bug (with video) are at bit.ly/3k1eWfS

The tag team of @abdhariri and @mrpowell blog about exploiting a slick UAF in #Adobe #Reader (CVE-2020-9715). The exploit was submitted to us by @MarkYason and patched last month. bit.ly/355EBi2

@chrisrohlf Thanks, Chris!

@eryeh Thanks, Erye!

@nudehaberdasher Thanks, Chris!

.@MarkYason discusses the attack surface of Microsoft's new #Windows10 EdgeHTML rendering engine -- #BHUSA Briefing ow.ly/N9hZM

A Peek into IE 10’s Enhanced Protected Mode Sandbox - securityintelligence.com/internet-explo… via @ibmxforce #ibmxforce #IE10

Diving Into IE 10’s Enhanced Protected Mode Sandbox at #BHASIA 2014 - securityintelligence.com/ie-10-enhanced… // #IBMXForce

#Target Data Breach: Understand & Detect #Kaptoxa POS Malware - securityintelligence.com/target-data-br… #malware #retail #pos #datasecurity #ibmxforce