# Researcher discloses logic-flaw chain that escaped Edge's sandbox

_Published Wednesday, October 28, 2026 at 2:19 PM EDT · Security · Latest · Tier 2 — Notable_

![Researcher discloses logic-flaw chain that escaped Edge's sandbox — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAGi2cGlEYo6PNV9aaEulhQB9MtbWjCBFhi3MugyJf4kGwtSPjq9F9wxhlptAUKuipSCQ0_NhE5eyEbHzMWnT6hVLsXtqrIQImq0QndxbKoKMz_gzxJonZa2jnvwHGEqjN_J7uyi5BPaqlGmtMn1y9xzJQywFZB_FNgKV-GR7qtBQfVmrLxdoUlyhPTiA/s1700-nu-rw-lo-l85-e365/edge.jpg)

DEVCORE researcher Orange Tsai published a method on October 28 that chained logic flaws to run code outside Microsoft Edge's browser sandbox without memory corruption. The exploit won $175,000 at Pwn2Own Berlin in May.

The chain abused browser navigation and sign-in features to run JavaScript across websites, then used Edge's reading mode and an internal diagnostic function to write an attacker-controlled file. Further steps turned that file access into program execution on Windows.

Microsoft fixed the Edge bugs on May 15 in Stable version 148.0.3967.70. Updated browsers are protected, and the exploit was a competition demonstration with no evidence of use against real users.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/researcher-reveals-how-logic-bugs-alone.html)

---
Canonical: https://techandbusiness.org/newswire/isgd_5qKkqIpAJnCELDuJl
Published: 2026-10-28T18:19:52.991Z
Story chronology: 2026-10-28T16:23:00.000Z
Retrieved: 2026-10-28T22:09:45.745Z
Publisher: Tech & Business (techandbusiness.org)