GoKawiilResearcher Orange Tsai details logic-only Microsoft Edge exploit chain from Pwn2Own Berlin 2026
Security researcher Orange Tsai of DEVCORE publicly detailed a Microsoft Edge sandbox-escape exploit chain built entirely from five logic bugs and two Windows features, with no memory corruption or AI assistance involved. The chain earned him $175,000 and 17.5 Master of Pwn points at Pwn2Own Berlin 2026, and he has since presented the full methodology at HITCON and Hexacon.
GoKawiil's interpretation of the reporting above, not reported fact.
The exploit's reliance purely on logic flaws rather than memory-safety bugs highlights how browser security weaknesses can persist even as vendors harden against traditional memory corruption. Its recognition with a Pwnie Award for Epic Achievement suggests the security community sees manual, non-AI-assisted exploit development as increasingly notable given growing use of automated and AI-driven vulnerability research.
- DEVCORE's Orange Tsai chained 4 logic bugs for a Microsoft Edge sandbox escape, winning $175,000 at Pwn2Own Berlin 2026.
- The full exploit chain used five bugs and two Windows features, with no memory corruption or AI tools involved.
- The work was nominated for and won the Epic Achievement award at this year's Pwnie Awards.
Source: blog.orange.tw, 2026-10-29
Published there as: “Forging a Microsoft Edge Full Chain with Logic Bugs Only”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.