{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T12:43:03Z","timestamp":1770813783432,"version":"3.50.1"},"reference-count":21,"publisher":"Emerald","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,2,11]]},"abstract":"<jats:sec>\n                    <jats:title>Purpose<\/jats:title>\n                    <jats:p>The purpose of this paper is to introduce Nuwa, a robust fuzzing framework for testing real-world Windows applications (UWP, WinUI2, WinUI3 and Win32), addressing challenges like multi-process architectures and complex graphical user interfaces (GUIs) that hinder existing tools.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Design\/methodology\/approach<\/jats:title>\n                    <jats:p>Nuwa integrates: a lightweight instrumentation module using WinDbg C++ API for code coverage; a scheduling algorithm prioritizing inputs based on coverage feedback; and an automated interaction layer leveraging Windows automation APIs for GUI manipulation with malformed inputs. The instrumentation module provides real-time coverage feedback, which is used by the scheduling algorithm to prioritize inputs that are more likely to trigger new code paths. The automated interaction module ensures that these inputs can be delivered to the application, even when complex GUI interactions are required.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Findings<\/jats:title>\n                    <jats:p>Testing on Siemens Solid Edge Free Viewer and Windows Media Player (UWP) revealed critical vulnerabilities, including out-of-bound writes, reads and zero day. Siemens yielded 9 CVEs (CVE-2023\u201339181 to CVE-2023\u201339186, CVE-2024\u201347941, CVE-2024\u201347940 and CVE-2024\u201354091), while Media Player had 3 undisclosed zero day (2 AVI, 1 MOV parsing), impacting millions of devices and causing Windows Explorer crashes. Experiments show Nuwa also outperforms WinAFL in both DynamoRIO and Intel-PT modes in metrics including compatibility, fuzzing throughput and coverage.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Originality\/value<\/jats:title>\n                    <jats:p>To the best of the authors\u2019 knowledge, Nuwa is the first coverage-guided fuzzing framework for real-world Windows apps, combining efficient instrumentation, smart scheduling and automated GUI interaction to fill a critical gap in fuzzing tools.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.1108\/ijwis-07-2025-0219","type":"journal-article","created":{"date-parts":[[2026,2,2]],"date-time":"2026-02-02T07:20:18Z","timestamp":1770016818000},"page":"77-97","source":"Crossref","is-referenced-by-count":0,"title":["Nuwa: a next-generation fuzzer for modern Windows application security"],"prefix":"10.1108","volume":"22","author":[{"given":"Yu","family":"Zhou","sequence":"first","affiliation":[{"name":"Southeast University School of Cyber Science and Engineering, , Nanjing,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Linning","family":"Peng","sequence":"additional","affiliation":[{"name":"Southeast University School of Cyber Science and Engineering, , Nanjing,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yutao","family":"Wang","sequence":"additional","affiliation":[{"name":"YunShangHuaAn , Nanjing,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yancui","family":"Xiang","sequence":"additional","affiliation":[{"name":"Nanjing University of Science and Technology Institute of Launch Dynamics, , Nanjing,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"140","published-online":{"date-parts":[[2026,2,3]]},"reference":[{"key":"2026020922470438500_ref001","volume-title":"Efficient, Transparent, and Comprehensive Runtime Code Manipulation, Tech. rep","author":"Bruening","year":"2004"},{"key":"2026020922470438500_ref002","unstructured":"Google\n           (2013), \u201cAmerican fuzzy lop (AFL)\u201d, available at:Link to the cited article. (accessed11 May 2025)."},{"key":"2026020922470438500_ref003","unstructured":"Google\n           (2025a), \u201cHonggfuzz\u201d, available at:Link to the cited article. (accessed12 May 2025)."},{"key":"2026020922470438500_ref004","unstructured":"Google\n           (2025b), \u201cSyzygy\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref005","unstructured":"Google Project Zero\n           (2025), \u201cWinAFL\u201d, available at:Link to the cited article. (accessed12 May 2025)."},{"key":"2026020922470438500_ref006","unstructured":"Intel\n           (2025), \u201cPIN: a dynamic binary instrumentation tool\u201d, available at:Link to the cited article. (accessed12 May 2025)."},{"key":"2026020922470438500_ref007","article-title":"Winnie: Fuzzing windows applications with harness synthesis and fast cloning\u201d, proceedings of the 2021 network and","volume-title":"Distributed System Security Symposium (NDSS 2021).","author":"Jung","year":"2021"},{"issue":"3","key":"2026020922470438500_ref008","doi-asserted-by":"crossref","first-page":"1199","DOI":"10.1109\/TR.2018.2834476","article-title":"Fuzzing: State of the art","volume":"67","author":"Liang","year":"2018","journal-title":"IEEE Trans. Rel."},{"key":"2026020922470438500_ref009","unstructured":"LLVM Project\n           (2025), \u201clibFuzzer - a library for coverage-guided fuzz testing\u201d, available at:Link to the cited article. (accessed12 May 2025)."},{"key":"2026020922470438500_ref010","unstructured":"Microsoft\n           (2024), \u201cWhat\u2019s a universal windows platform (UWP) app?\u201d, available at:Link to the cited article. (accessed28 April 2025)."},{"key":"2026020922470438500_ref011","unstructured":"Microsoft\n           (2025a), \u201cAppContainer isolation\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref012","unstructured":"Microsoft\n           (2025b), \u201cDebugging a UWP app using WinDbg\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref013","unstructured":"Microsoft\n           (2025c), \u201cMicrosoft store\u201d, available at:Link to the cited article. (accessed28 April 2025)."},{"key":"2026020922470438500_ref014","unstructured":"Microsoft\n           (2025d), \u201cMSTest overview\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref015","unstructured":"Microsoft\n           (2025e), \u201cResponsive design techniques\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref016","unstructured":"Microsoft\n           (2025f), \u201cWhat is WinDbg?\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref017","unstructured":"Microsoft\n           (2025g), \u201cWinAppDriver\u201d, available at:Link to the cited article. (accessed1 June 2025)."},{"key":"2026020922470438500_ref018","unstructured":"Microsoft\n           (2025h), \u201cWindows media player\u201d, available at:Link to the cited article. (accessed30 August 2025)."},{"key":"2026020922470438500_ref019","unstructured":"Microsoft\n           (2025i), \u201cWinUI for UWP (WinUI 2)\u201d, available at:Link to the cited article. (accessed6 May 2025)."},{"key":"2026020922470438500_ref020","unstructured":"Microsoft\n           (2025j), \u201cWinUI in the windows app SDK (WinUI 3)\u201d, available at:Link to the cited article. (accessed6 May 2025)."},{"key":"2026020922470438500_ref021","unstructured":"Siemens\n           (2025), \u201cSimens solid edge\u201d, available at:Link to the cited article. (accessed30 August 2025)."}],"container-title":["International Journal of Web Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.emerald.com\/ijwis\/article-pdf\/22\/1\/77\/11211913\/ijwis-07-2025-0219en.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/www.emerald.com\/ijwis\/article-pdf\/22\/1\/77\/11211913\/ijwis-07-2025-0219en.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T03:47:26Z","timestamp":1770695246000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.emerald.com\/ijwis\/article\/22\/1\/77\/1338936\/Nuwa-a-next-generation-fuzzer-for-modern-Windows"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,3]]},"references-count":21,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2026,2,11]]}},"URL":"https:\/\/doi.org\/10.1108\/ijwis-07-2025-0219","relation":{},"ISSN":["1744-0084","1744-0092"],"issn-type":[{"value":"1744-0084","type":"print"},{"value":"1744-0092","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,3]]}}}