Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

Security researcher Orange Tsai of DEVCORE demonstrated a chain of logic flaws—without any memory corruption—that can escape Microsoft Edge's sandbox and execute code on a Windows host. The exploit won $175,000 at Pwn2Own Berlin in May 2026. Microsoft patched the Edge vulnerabilities the day after the contest. The full technical write-up was published by Tsai on October 28, five months after the competition. The attack works by turning a malicious web page into code running outside the browser sandbox on Windows. The achievement is notable because it relied entirely on logic bugs rather than traditional memory corruption techniques, representing a sophisticated and less commonly seen attack methodology.