Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge’s sandbox, security researcher Orange Tsai of DEVCORE has shown. Tsai published the full method on October 28, five months after the chain won $175,000 at Pwn2Own Berlin in May; Microsoft fixed the Edge bugs the day after the contest.