{"id":246679,"date":"2026-05-14T14:53:00","date_gmt":"2026-05-14T18:53:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/14\/windows-11-and-microsoft-edge-hacked-at-pwn2own-berlin-2026\/"},"modified":"2026-05-15T12:25:16","modified_gmt":"2026-05-15T16:25:16","slug":"windows-11-and-microsoft-edge-hacked-at-pwn2own-berlin-2026","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/14\/windows-11-and-microsoft-edge-hacked-at-pwn2own-berlin-2026\/","title":{"rendered":"Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026"},"content":{"rendered":"<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026\/\">Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026<\/a><\/p>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026\/\">https:\/\/www.bleepingcomputer.com\/news\/security\/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-05-14 14:53:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.bleepingcomputer.com\">www.bleepingcomputer.com<\/a><\/p>\n<p style=\"text-align:center\">\n<p>On the first day of Pwn2Own Berlin 2026, security researchers collected $523,000\u00a0in cash awards after exploiting\u00a024 unique zero-days.<\/p>\n<p>Today&#8217;s highlight was the attempt of Cheng-Da Tsai (also known as Orange Tsai), who was awarded\u00a0$175,000 in rewards after\u00a0chaining\u00a04 logic bugs to achieve a sandbox escape on Microsoft Edge.<\/p>\n<p>Windows 11 was also hacked three times by\u00a0Angelboy and TwinkleStar03 (working with the DEVCORE Internship Program), Marcin Wi\u0105zowski, and Kentaro Kawane of GMO Cybersecurity, each earning $30,000 in cash rewards for demonstrating new privilege escalation zero-days.<\/p>\n<p>Valentina Palmiotti (chompie)\u00a0of IBM X-Force Offensive Research (XOR) also collected $20,000 after rooting Red Hat Linux for Workstations\u00a0and another $50,000 for a\u00a0zero-day in the\u00a0NVIDIA Container Toolkit.<\/p>\n<p>Other successful attempts include\u00a0k3vg3n chaining\u00a03 bugs to take down LiteLLM ($40,000),\u00a0Satoki Tsuji and haehae\u00a0exploiting\u00a0NVIDIA Megatron Bridge zero-days\u00a0($20,000),\u00a0Compass Security and maitai of Doyensec hacking\u00a0OpenAI&#8217;s\u00a0Codex coding agent\u00a0(each earning $40,000),\u00a0haehae dropping a Chroma zero-day\u00a0($20,000), and\u00a0STARLabs SG\u00a0a LM Studio zero-day\u00a0($40,000).\u00a0<\/p>\n<p>The DEVCORE Research Team is now leading the competition with $205,000, followed by\u00a0Valentina Palmiotti with $70,000.<\/p>\n<p><iframe loading=\"lazy\" title=\"Pwn2Own Berlin 2026 Day 1 - DEVCORE vs Microsoft Edge\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/8ngMzEVrdVs?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>\u200b\u200bThe Pwn2Own Berlin 2026\u00a0hacking contest, which focuses on enterprise technologies and artificial intelligence, takes place\u00a0<span style=\"box-sizing:border-box; margin:0px; padding:0px\">at the\u00a0OffensiveCon\u00a0conference from May 14 to<\/span>\u00a0May 16.<\/p>\n<p>On the second day, the competitors will also attempt to exploit zero-days in Microsoft SharePoint, Microsoft Exchange, Windows 11, Apple Safari, Cursor,\u00a0Red Hat Enterprise Linux for Workstations, LM Studio, OpenAI Codex, LiteLLM, Anthropic Claude Code, and Mozilla Firefox.<\/p>\n<p>Security researchers targeting fully patched products in the web browser, virtualization, local privilege escalation, servers, enterprise&#8230;<\/p>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 https:\/\/www.bleepingcomputer.com\/news\/security\/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026\/ Publish Date: 2026-05-14 14:53:00&#8230;<\/p>\n","protected":false},"author":1,"featured_media":246682,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2025\/05\/15\/Pwn2Own_Berin.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[20,24,31],"class_list":["post-246679","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-artificial-intelligence","tag-cybersecurity","tag-exploit"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246679"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=246679"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246679\/revisions"}],"predecessor-version":[{"id":246683,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246679\/revisions\/246683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/246682"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=246679"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=246679"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=246679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}