๐ฉ Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox Without Memory Corruption
Source:
cybersecuritynews.com, 2026-10-29
https://cybersecuritynews.com/microsoft-edge-zero-click-exploit/
A new exploit chain for Microsoft Edge revealed that combines five bugs and two Windows features to run code outside the browser sandbox.
Published by Security researcher Orange Tsai on October 28, 2026, the research shows how flaws in browser logic can turn a malicious webpage into code execution on Windows without memory corruption.
Tsai, a member of DEVCORE, built the chain for Pwn2Own Berlin 2026. His technical write-up describes two months of research completed without AI tools. The finished exploit used fewer than 100 lines of code.