Taking a page from the kernel's book: A TLB issue in mremap()

Adventures in Video Conferencing Part 1: The Wild World of WebRTC

On VBScript

Searching statically-linked vulnerable library functions in executable code

Heap Feng Shader: Exploiting SwiftShader in Chrome

Finding and Exploiting Safari Bugs Using Publicly Available Tools

A cache invalidation bug in Linux memory management

Adventures in vulnerability reporting

More Mac OS X and iPhone sandbox escapes and kernel bugs

Reading privileged memory with a side-channel