The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!
Summary
This article by Orange Tsai details a logic-only, memory-free chain of browser-exploitation bugs that achieves a sandbox escape in Microsoft Edge, showcased at Pwn2Own Berlin 2026. It covers a sequence of navigation throttles, UXSS primitives, cross-origin bypasses, and protocol-handler abuse, highlighting the security implications for modern browsers and enterprise users.