July 25, 2026 Headless Browser RCE, Part 3: Defeating Full RELRO in wkhtmltopdf's WebKit Turning a 2011 JavaScriptCore use-after-free into a single self-contained HTML file that reaches code execution in wkhtmltopdf's WebKit 534.34 across Linux (Partial and Full RELRO, three glibc versions) and native macOS, under ASLR.

July 19, 2026 Headless Browser RCE, Part 2: Chaining Three JavaScriptCore Bugs Chaining three old JavaScriptCore bugs into a single-file RCE against Splash's QtWebKit engine, under W^X and ASLR.