Wout van der Ploeg

I do security research, mostly around Apple stuff. I play CTFs with superflat and spend my time reverse engineering things, breaking things, and occasionally reporting what I find.

Posts

How CVE-2026-2441 Actually Works
Mar 17, 2026
Learn about a use-after-free bug in the Chromium renderer process, how Blink's CSSFontFeatureValuesMap iterator gets dangling after a rehash, and how it leads to arbitrary read.