Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

As cited

Copy frozen at 2026-10-28 21:26 UTC (site build).

vulnerabilities

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A researcher demonstrated a chain of logic flaws in Microsoft Edge that bypass the browser sandbox and achieve code execution on Windows, without requiring memory corruption. The exploit chain won $175,000 at Pwn2Own Berlin in May, and Microsoft patched the bugs immediately after the contest. The researcher published technical details on October 28.

Why it matters: Browser developers and Windows defenders need to review logic-based sandbox escapes as a viable attack surface separate from memory safety issues, and verify that Edge's patching covers the full chain.

Source published

2026-10-28 16:23 UTC

First seen by Cybersecurity Tracker

2026-10-28 20:01 UTC