Logic bugs in Microsoft Edge break sandbox escapes

Security researcher Orange Tsai disclosed how a chain of logic flaws in Microsoft Edge, without memory corruption, can escape the browser sandbox and execute code on Windows systems. The vulnerabilities won $175,000 at Pwn2Own Berlin in May 2026. Microsoft patched the bugs the day after the contest. No active exploitation has been reported.