The Windows Registry Adventure #8: Practical exploitation of hive memory corruption googleprojectzero.blogspot.com
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages googleprojectzero.blogspot.com