Microsoft Exchange, Windows 11, and Cursor Zero-Days Exploited on Pwn2Own Day 2

Pwn2Own Berlin 2026 Day Two produced 15 new zero-day exploit demonstrations (adding $385,750 in rewards), highlighted by a chained Microsoft Exchange RCE achieving SYSTEM privileges that earned $200,000; other findings included Windows 11 and Red Hat Enterprise Linux privilege escalations and multiple compromises of AI/developer tools, with vendors expected to patch exposed flaws.