Skip to content

Xbox Edge Browser - File System Exposure


Release date unknown
Author TitleOS
Classification File Access
Patched unknown (presumed yes)
Patch date unknown
First patched system version unknown


Access local volumes using the Edge browser.

  • Edge’s address bar allowed access of local files on the device via the File:\\ protocol.
  • This functionality is used for viewing local PDFs, etc but as the Xbox file system isn’t normally accessible, this allowed for the dumping of Xbox binaries.
  • Any valid path would trigger a download prompt, copying the file to the user's download folder where it was accessible via the File Browser application.

This has been mitigated by the fact that the File Explorer application was disabled due to "Limited Usage"


  • Enter any valid path into the edge browser url bar and prepend File:\\


Authors: tunip3