Buzz to Boom: Detecting Message Progression Vulnerabilities in Electron Applications via Segmented Directed Fuzzing

arXiv:2607.20698 · cs.CR · Submitted 2026-07-22 · Read on arXiv

Jianjia Yu, Zhengyu Liu, Ziyang Li, Yu Sun, Yinzhi Cao

cs.CR

Submitted: 2026-07-22

Code: https://github.com/doyensec/electronegativity

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Message Progression Vulnerability — 7× in this paper
Trace — 4× in this paper · explained in 2 episodes
Accuracy — 3× in this paper · explained in 1 episode
Core — 3× in this paper · explained in 2 episodes
Document Object Model — 3× in this paper
Ablation — 2× in this paper · explained in 1 episode
Agentic Framework — 2× in this paper · explained in 6 episodes
Annual Network and Distributed System Security Symposium — 2× in this paper
IEEE Symposium on Security and Privacy — 2× in this paper
Lines of Code — 2× in this paper
OS-level Remote Code Execution — 2× in this paper
Agentic Workflows — 1× in this paper · explained in 1 episode
Generalizability — 1× in this paper · explained in 6 episodes
Pruning — 1× in this paper · explained in 4 episodes
Reinforcement Learning — 1× in this paper · explained in 4 episodes
SIGSAC Conference on Computer and Communications Security — 1× in this paper
Semantic Understanding — 1× in this paper · explained in 2 episodes

Related papers