ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability

Key Points:

• Microsoft Edge is affected by a security bypass vulnerability that allows remote attackers to access restricted functionality.
• The vulnerability requires user interaction, as it can only be exploited when the target visits a malicious webpage or opens a malicious file.
• Users should avoid visiting untrusted sites and opening unknown files, and organizations should implement browser security policies to mitigate risks.

Technical Details: The vulnerability has been assigned CVE-2026-329, which allows for unauthorized access to certain functionalities within Microsoft Edge.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned