Forging a Microsoft Edge Full Chain with Logic Bugs Only
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A researcher at DEVCORE, Orange Tsai, published a write-up of a fully logic-based Microsoft Edge exploit chain built for Pwn2Own Berlin 2026, which earned a $175,000 sandbox escape and was nominated for a Pwnie Award. The chain relies on five bugs and two Windows features, with no memory corruption.