The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!
Summary
The article details a security-focused exploration of browser exploitation by Orange Tsai, describing a logic-only full-chain attack against Microsoft Edge demonstrated at Pwn2Own Berlin 2026. It covers multiple vulnerabilities, navigation throttles, UXSS primitives, and steps toward arbitrary code execution, while discussing defensive lessons and mitigations for browser vendors. The write-up includes deep dives into browser internals, CVEs, and practical considerations for responsible disclosure.