Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
6 Articles
6 Articles
According to Tecmundo, DEVCORE researcher showed logical flaws in Microsoft Edge and won $175 thousand in Berlin's Pwn2Own
A chain of logical flaws in Microsoft Edge enabled the browser's sandbox to be bypassed without memory corruption. Discovered by Orange Tsai, DEVCORE, the research was awarded $175 thousand in Pwn2Own and shows the risks of the chaining of vulnerabilities, reinforcing the importance of security updates.
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox
A new exploit chain for Microsoft Edge revealed that combines five bugs and two Windows features to run code outside the browser sandbox. Published by Security researcher Orange Tsai on October 28, 2026, the research shows how flaws in browser logic can turn a malicious webpage into code execution on Windows without memory corruption. Tsai, a member of DEVCORE, built the chain for Pwn2Own Berlin 2026. His technical write-up describes two months …
Researchers reveal how they hacked Microsoft Edge to win the $175,000 Pwn2Own competition using only logical flaws.
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain won $175,000 at the Pwn2Own Berlin contest in May. Microsoft fixed the Edge bugs the day after the contest,
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium




