Symantec: remote root via vulnerable kernel-mode filter drivers https://googleprojectzero.blogspot.com/2016/06/how-to-compromise-enterprise-endpoint.html https:

Symantec: remote root via vulnerable kernel-mode filter drivers https://googleprojectzero.blogspot.com/2016/06/how-to-compromise-enterprise-endpoint.html https://googleprojectzero.blogspot.com/2016/06/how-to-compro... ESET NOD32: remote root via vulnerable kernel-mode filter drivers https://googleprojectzero.blogspot.com/2015/06/analysis-and-exploitation-of-eset.html https://googleprojectzero.blogspot.com/2015/06/analysis-and-... Comodo: code execution vulns in virus scanner https://bugs.chromium.org/p/project-zero/issues/detail?id=769 https://bugs.chromium.org/p/project-zero/issues/detail?id=76... and installs an insecure web browser and sets it as the default https://bugs.chromium.org/p/project-zero/issues/detail?id=704 https://bugs.chromium.org/p/project-zero/issues/detail?id=70... Avast: remote code execution in network traffic filter https://bugs.chromium.org/p/project-zero/issues/detail?id=546 https://bugs.chromium.org/p/project-zero/issues/detail?id=54... AVG: installs Chrome extension that leaks your browsing history to anyone who cares to read it https://www.theregister.co.uk/2015/12/29/avg_google_chrome_extension/ https://www.theregister.co.uk/2015/12/29/avg_google_chrome_e... TrendMicro: remote file access with SYSTEM privilege https://bugs.chromium.org/p/project-zero/issues/detail?id=775 https://bugs.chromium.org/p/project-zero/issues/detail?id=77... Kaspersky: a diverse range vulnerabilities over the years, ranging from remote root vulns (https://googleprojectzero.blogspot.com/2015/09/kaspersky-mo-unpackers-mo-problems.html https://googleprojectzero.blogspot.com/2015/09/kaspersky-mo-...) to "merely" making all SSL traffic man-in-the-middleable (https://bugs.chromium.org/p/project-zero/issues/detail?id=978 https://bugs.chromium.org/p/project-zero/issues/detail?id=97...) Etc, etc.