Security3 hOctober 28, 2026, 23:23

Researcher reveals logic-bug chain that cracked Edge for $175,000 at Pwn2Own

DEVCORE researcher Orange Tsai published a method that turns a malicious web page into code execution outside Microsoft Edge's sandbox using only logic flaws, with no memory corruption. The chain earned $175,000 at Pwn2Own Berlin in May, and Microsoft patched the bugs the day after the contest.

The Hacker News

Open source

Researcher reveals logic-bug chain that cracked Edge for $175,000 at Pwn2Own

Logic-only bug chain escapes Edge sandbox on Windows
Exploit won $175,000 at Pwn2Own Berlin in May 2026
Microsoft patched the flaws the day after the contest
Full technical write-up published on October 28

#Microsoft#Edge#Pwn2Own#DEVCORE

Researchers forged RSA signatures without cracking the key

Security

Google threat intelligence group details how one of its researchers infiltrated hacker group TeamPCP and helped disrupt its software supply chain hacking spree (Andy Greenberg/Wired)

Science

The moon is shrinking: 10,000 cracks reveal the scale of contraction

Science

Researcher reveals logic-bug chain that cracked Edge for $175,000 at Pwn2Own

Researchers forged RSA signatures without cracking the key

Google threat intelligence group details how one of its researchers infiltrated hacker group TeamPCP and helped disrupt its software supply chain hacking spree (Andy Greenberg/Wired)

The moon is shrinking: 10,000 cracks reveal the scale of contraction

Tiny hydrides reveal hidden stresses that can crack nuclear reactor pressure tubes