Orange Tsai described the Edge exploit used at Pwn2Own Berlin 2026. The researcher chained five logic bugs and two Windows features to cross site and privileged-reader boundaries, eventually reaching file writes and code execution. The retrospective reports roughly two months of manual research without memory corruption. Its short final exploit does not represent the total research effort, nor establish that all current Edge installations remain vulnerable. The defensive lesson is to review authority transfers between features as well as memory safety.
Back to Tech
An Edge exploit chain crossed boundaries without memory corruption
A competition write-up highlights how logic flaws and legitimate features can compose into an attack.