July 25, 2026 Headless Browser RCE, Part 3: Defeating Full RELRO in wkhtmltopdf's WebKit A 2011 JavaScriptCore use-after-free turned into a single-file RCE against wkhtmltopdf's WebKit 534.34, defeating Full RELRO under ASLR.