Orange Tsai demonstrates five-flaw Edge sandbox escape at Pwn2Own Berlin
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Microsoft
- Product
- Microsoft Edge
- First seen
Summary
According to a Mastodon post linking to a news article, researcher Orange Tsai chained five logic errors in Microsoft Edge to run code outside the browser sandbox. The exploit won $175,000 at Pwn2Own Berlin, and the post does not name a CVE.
If you use Microsoft
Install the latest Microsoft Edge security update once Microsoft publishes a fix
Enable automatic updates for Edge
Check the Microsoft Security Response Center for an advisory on these logic flaws
Update Microsoft Edge to the latest stable version
Be cautious with unexpected login prompts or dialogs in the browser
Enable automatic browser updates where possible
What the sources say 4
· Mastodon: “Logic Flaws Exposed in Microsoft Edge Meet Orange Tsai, the mastermind who turned a simple web page into a code-executing machine outside Microsoft Edge's sandbox - all thanks to a clever chain of five logic errors.” Source
· Mastodon: “Incorrect default permissions in https:// asp.net Core allows an authorized attacker to elevate privileges locally.” Source
· Mastodon: “Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.” Source
· Mastodon: “Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.” Source