Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
AI-summarised brief · reviewed before publication
A security researcher demonstrated that a series of logic flaws in Microsoft Edge could allow a malicious web page to escape the browser sandbox and run code on a Windows system, without any memory corruption. The exploit, built in under 100 lines, was showcased at the Pwn2Own Berlin contest, where it earned a $175,000 prize. Microsoft patched the vulnerabilities the day after the contest, and the fixed Edge version is already available to users. The chain reveals a new attack surface for cross‑site scripting.
💡 Why It Matters
- · The discovery shows that even non‑memory bugs can provide full system control, expanding the threat landscape beyond traditional exploits.
- · It underscores the need for continuous, human‑driven security research to uncover hidden weaknesses.