Windows 11, Microsoft Edge Hacked at Pwn2Own Berlin

The first day of Pwn2Own Berlin 2026 saw security researchers successfully exploit 24 unique zero-day vulnerabilities in Windows 11 and Microsoft Edge. According to BleepingComputer, these exploits resulted in $523,000 in cash awards, highlighting critical flaws in widely used Microsoft products.

This isn’t just a technical exercise; it’s a stark reminder of the continuous attack surface presented by core operating systems and browsers. Attackers, especially sophisticated nation-state groups and financially motivated ransomware gangs, actively seek and weaponize these types of vulnerabilities. The speed and success rate at Pwn2Own underscore that even mature products like Windows and Edge contain exploitable gaps.

For defenders, this means maintaining a relentless focus on patching and hardening. These zero-days, once disclosed, become prime targets for rapid weaponization. CISOs must ensure their vulnerability management programs are agile enough to deploy patches for critical OS and browser flaws immediately upon release, minimizing the window of exposure. Assume these exploits will be reverse-engineered and integrated into attacker toolkits quickly.