Hackers at Pwn2Own competition exploit combination of bugs in Microsoft Edge, Windows 10, and VMware Workstation to escape virtual machine and compromise host
Hack worked by stitching together three separate exploits. — Contestants at this year's Pwn2Own hacking competition in Vancouver …
Context & Ripple Effects
This is the opening data point in a pattern that Pwn2Own Vancouver would repeat for years: the winning attack was a chain, not a single bug — Edge as the entry vector, Windows 10 as the pivot, VMware Workstation as the isolation layer broken last. The same structure reappears in later contests, including a 2019 win that chained Firefox, a VMware Workstation client, and Microsoft Edge for a six-figure payout.
VMware Workstation in particular keeps showing up as the target of choice for guest-to-host escapes: it fell again in 2019 alongside Safari and Oracle VirtualBox, and Microsoft products were hit repeatedly through the 2022 Vancouver contest, where first-day awards for zero-day exploits topped $800K. What this 2017 report captures is the moment the industry's core isolation assumption — that a compromised guest stays in the guest — was publicly demonstrated to rest on unchained software, not on a hard boundary.
First-order effects
- Microsoft and VMware face immediate patching work on three separate codebases, since the escape only works when the Edge, Windows 10, and Workstation bugs are available together — fixing any one link breaks the chain.
- Enterprises running sensitive workloads in VMware Workstation VMs lose, until patched, the guarantee that guest compromise stays contained to the guest.
Second-order effects
- The result pressures VMware to treat Workstation as a security product, not just virtualization infrastructure — because every later Pwn2Own cycle (2019, 2022) shows researchers returning to it for exactly this guest-to-host prize.
- Rival hypervisors inherit the scrutiny: VirtualBox fell in the same 2019 contest, so buyers comparing desktop virtualization products now weigh demonstrated exploit chains, not just features.
Third-order effects
- If the 2017–2022 pattern holds, chained exploits become the standard unit of attack against layered defenses, and 'sandbox' or 'VM isolation' claims carry weight only relative to the weakest link in a vendor's own stack.
- Contest-driven disclosure — Pwn2Own's cash awards for full chains — cements a pipeline where vendors learn their worst cross-product vulnerabilities from paid researchers rather than from breaches.
The trend: Pwn2Own's recurring VMware and browser wins from 2017 through 2022 show security research consolidating around multi-bug chains that treat vendor isolation layers as one more link to break.