Skip to content
EventUpdating

Anthropic unreleased model discovers and exploits vulnerabilities in multiple software products

4 reports3 reporting sourcesplus 3 outlets covering itLatest report

Start here

AI overview

Anthropic's Frontier Red Team said one of its unreleased internal research models found multiple vulnerabilities in Chrome, Safari, Android, Windows and Linux in experiments and chained them into five proof-of-concept exploit chains requiring little or no user interaction, which could lead to impacts such as remote code execution. The vulnerabilities were first reported to vendors under coordinated disclosure and have been fixed, and have not been seen in real attacks. The Chrome chain combined four vulnerabilities to escape the browser sandbox, and a total of 62 vulnerabilities received CVE identifiers and were fixed in Chrome 156; the Safari chain bypassed the same-origin policy to read cookies. Separately, The Hacker News reported that the Linux kernel TCP race condition vulnerability CVE-2026-98432 received a CVSS score of 9.8, affecting distributions including Ubuntu and RHEL, and that as of October 29 the relevant distributions had not yet released fixed kernels; Anthropic said its model autonomously wrote a two-stage exploit chain that first leaked kernel addresses to bypass KASLR and then executed commands as root.

Generated by AI from reports · Updated 7 hr ago

Progress timeline

Oct 30
  1. Dark ReadingSelected
    Claude model builds exploits for multiple mainstream browsers and operating systems

    Anthropic said this week that an unreleased version of Claude found critical vulnerabilities in Chrome, Safari, Android, Windows and Linux and chained them into 5 usable exploit chains requiring little or no human interaction; all affected vendors have fixed them. The Chrome exploit chain combined four vulnerabilities to escape the browser sandbox; Anthropic said it reported 62 vulnerabilities to Google in total, all of which received CVE numbers and were fixed in Chrome 156. The Safari exploit chain bypassed the same-origin policy and could read browsing history, cookies and data from logged-in websites. The Android exploit chain extracted photos and other personal information on a locked Pixel 9. The Windows one was an out-of-bounds read in the kernel implementation of the transport protocol used by HTTP/3, remotely triggerable for denial of service. The Linux one was a zero-click remote code execution with root privileges, corresponding to CVE-2026-98432, fixed upstream and backported to each maintained stable kernel branch.

Oct 29
  1. The Hacker News
    Linux kernel TCP vulnerability receives a CVSS score of 9.8, affecting distributions including Ubuntu and Red Hat

    The race condition vulnerability CVE-2026-98432 in the Linux kernel TCP code affects distributions including Ubuntu and RHEL, was rated 9.8 by the kernel CVE team, and as of October 29 Ubuntu and RHEL had not yet released fixed kernels. Anthropic said its model Claude autonomously wrote a two-stage exploit chain: first leaking kernel addresses in about 48 minutes to bypass KASLR, then overwriting a callback pointer via a buffer overflow, and about 5 minutes later executing commands as root, targeting servers with multipath TCP enabled. The vulnerability is a use-after-free when IPv4 TCP establishes a connection, was introduced in Linux 4.4, and was fixed upstream on October 5 with thanks to Anthropic researcher Xinyang Ge.

Oct 28
  1. The Hacker NewsSelected
    Anthropic unreleased model chains multiple vulnerabilities into working Chrome, Safari, Windows and Linux exploit chains

    Anthropic says one of its unreleased internal research models discovered multiple vulnerabilities in Chrome, Safari, Android, Windows and Linux in experiments and chained them into working proof-of-concept exploit chains; all vulnerabilities were reported to vendors first and have been fixed, and none have been seen in real attacks. An Anthropic Frontier Red Team article lists five chains: the Chrome chain uses four vulnerabilities to go from visiting a webpage to code execution outside the sandbox, fixed in Chrome 156; the Safari chain runs no code and, after disabling the same-origin policy, can read the user's login data on other websites, fixed in iOS and iPadOS 26.5.2; the Windows chain is a denial of service against a server responding to HTTP/3 requests (CVE-2026-33096); the Linux chain obtains a root shell without logging in when the target runs a multipath TCP listener (CVE-2026-98432).

Oct 27
  1. Anthropic Red TeamingSelected
    Anthropic used Claude to discover and exploit vulnerabilities in real-world critical software

    Anthropic used an unreleased internal research model to discover serious vulnerabilities in Chrome, Safari, Android, Windows and Linux, write five attack chains requiring little or no user interaction that achieve effects such as remote code execution, and report them to vendors under coordinated disclosure. The Chrome one-click RCE chain chained together vulnerabilities including a V8 heap corruption, a sandbox escape and a FedCM use-after-free; 62 CVEs were fixed in Chrome 156, all critical or high severity. The Safari chain bypassed the same-origin policy to read sensitive data such as cookies, and Apple confirmed and fixed it the same day; the Android lock-screen bypass could extract personal information such as photos without unlocking the device. The Windows kernel QUIC out-of-bounds read (CVE-2026-33096) and the Linux kernel multipath TCP race condition vulnerability (CVE-2026-98432) have both been fixed.

Related discussion

Total 90 items

Attention trend

New sources per day

76 in 4 days·most 48 (Oct 28)·today 4

  • Oct 27: 1 new sources (1 outlets, 0 accounts)
  • Oct 28: 48 new sources (3 outlets, 45 accounts)
  • Oct 29: 23 new sources (1 outlets, 22 accounts)
  • Oct 30: 4 new sources (1 outlets, 3 accounts)

Hourly attention

Current attention 82·Peak in the comparable period 82 (Oct 30 03:00)·Change over the comparable past 24 hours +1%

0255075100Oct 2804:00Oct 2820:00Oct 2911:00Oct 3003:00