Cutting Edge - Microsoft Browser Security — From People Who Owned It

Dive deep into the Microsoft Edge security architecture in this Black Hat conference talk, exploring sandbox initialization, browser broker implementation, inter-process communication, and renderer security isolation. Gain insights from security experts who have successfully exploited the browser, as they dissect the Universal Windows Platform, Edge's process structure, and various security mechanisms. Examine topics such as manager and content process startup, child process capabilities, JIT engine RPC, out-of-process COM activation, and Adobe Flash integration. Learn about potential vulnerabilities, including a bug in Macromedia Breeze, and understand how attackers navigate from Internet to Local zones, bypassing Same-Origin Policy restrictions.