Researcher discloses logic-flaw chain that escaped Edge's sandbox

DEVCORE researcher Orange Tsai published a method on October 28 that chained logic flaws to run code outside Microsoft Edge's browser sandbox without memory corruption. The exploit won $175,000 at Pwn2Own Berlin in May. The chain abused browser navigation and sign-in features to run JavaScript across websites, then used Edge's reading mode and an internal diagnostic function to write an attacker-controlled file. Further steps turned that file access into program execution on Windows. Microsoft fixed the Edge bugs on May 15 in Stable version 148.0.3967.70. Updated browsers are protected, and the exploit was a competition demonstration with no evidence of use against real users.