Flaw in Microsoft Edge Allowed Web Pages to Run Code on Windows Devices

A security researcher revealed a chain of logic flaws in Microsoft Edge that allowed a malicious website to escape the browser sandbox and execute code directly on a Windows computer. Microsoft released a patch shortly after the technique was demonstrated in competition, but technical details of the exploit have now been made public. Unpatched systems remain exposed to device compromise simply by opening an untrusted web link.