Logic bugs alone escaped Microsoft Edge at a $175,000 Pwn2Own win
DEVCORE's chain needs no memory corruption and was fixed in Edge 148.0.3967.70 the day after the May contest.
55
Vulnerability2 · 1 read
CVE-2026-45492
- CVSS 3.1
- 5.4 medium
- EPSS
- <1%p23
- Published
- ·
- Modified
Description · NVD
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
- Vendors
- microsoft
- Products
- edge chromium
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N