Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

AI Summary

Orange Tsai of DEVCORE published the full technical details on October 28 of a logic-flaw-only exploit chain that bypassed Microsoft Edge's sandbox and achieved remote code execution — earning $175,000 at Pwn2Own Berlin in May. Notably, no memory corruption was required; the entire chain relied on logic bugs alone. Microsoft patched the Edge flaws the day after the contest, making this a valuable case study in non-memory-corruption browser exploitation.

Read full article → https://thehackernews.com/2026/10/researcher-revea…

Relevance score: 86.0/100

# More from October 29

1
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns The Hacker News
3
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges The Hacker News
4
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws The Hacker News
5
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch The Hacker News
6
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers The Hacker News
7
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network The Hacker News
8
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass The Hacker News
9
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers The Hacker News
10
Chrome and Firefox Updates Patch Over 200 Vulnerabilities SecurityWeek