Unicode Troubles, Bypassing CFG, and Racey Pointer Updates

On the web side, we cover a portswigger post on ways of abusing unicode mishandling to bypass firewalls and a doyensec guide to OAuth vulnerabilities. We also get into a Windows exploit for a use-after-free in the telephony service that bypasses Control Flow Guard, and a data race due to non-atomic writes in the macOS kernel. Links and vulnerability summaries for this episode are available at: [00:00:00] Introduction [00:00:22] Bypassing character blocklists with unicode overflows [00:06:53] Common OAuth Vulnerabilities [00:18:37] Windows Telephony Service - It's Got Some Call-ing Issues [CVE-2024-26230] [00:32:05] TRAVERTINE (CVE-2025-24118) Podcast episodes are available on the usual podcast platforms: -- Apple Podcasts: -- Spotify: -- Google Podcasts: -- Other audio platforms can be found at You can also join our discord:

You can listen to Unicode Troubles, Bypassing CFG, and Racey Pointer Updates online on Radio and Podcast. Open the player on this page to stream the available audio.

Unicode Troubles, Bypassing CFG, and Racey Pointer Updates is an episode from Day[0] by dayzerosec.

This episode is 00:41:29 long.

This episode was published on Feb 4, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Day[0] when more episodes are available from the podcast feed.