Anthropic unreleased model discovers and exploits vulnerabilities in multiple software products
Start here
Anthropic's Frontier Red Team said one of its unreleased internal research models found multiple vulnerabilities in Chrome, Safari, Android, Windows and Linux in experiments and chained them into five proof-of-concept exploit chains requiring little or no user interaction, which could lead to impacts such as remote code execution. The vulnerabilities were first reported to vendors under coordinated disclosure and have been fixed, and have not been seen in real attacks. The Chrome chain combined four vulnerabilities to escape the browser sandbox, and a total of 62 vulnerabilities received CVE identifiers and were fixed in Chrome 156; the Safari chain bypassed the same-origin policy to read cookies. Separately, The Hacker News reported that the Linux kernel TCP race condition vulnerability CVE-2026-98432 received a CVSS score of 9.8, affecting distributions including Ubuntu and RHEL, and that as of October 29 the relevant distributions had not yet released fixed kernels; Anthropic said its model autonomously wrote a two-stage exploit chain that first leaked kernel addresses to bypass KASLR and then executed commands as root.
Generated by AI from reports · Updated 7 hr ago
Progress timeline
- Dark ReadingSelectedClaude model builds exploits for multiple mainstream browsers and operating systems
Anthropic said this week that an unreleased version of Claude found critical vulnerabilities in Chrome, Safari, Android, Windows and Linux and chained them into 5 usable exploit chains requiring little or no human interaction; all affected vendors have fixed them. The Chrome exploit chain combined four vulnerabilities to escape the browser sandbox; Anthropic said it reported 62 vulnerabilities to Google in total, all of which received CVE numbers and were fixed in Chrome 156. The Safari exploit chain bypassed the same-origin policy and could read browsing history, cookies and data from logged-in websites. The Android exploit chain extracted photos and other personal information on a locked Pixel 9. The Windows one was an out-of-bounds read in the kernel implementation of the transport protocol used by HTTP/3, remotely triggerable for denial of service. The Linux one was a zero-click remote code execution with root privileges, corresponding to CVE-2026-98432, fixed upstream and backported to each maintained stable kernel branch.
- The Hacker NewsLinux kernel TCP vulnerability receives a CVSS score of 9.8, affecting distributions including Ubuntu and Red Hat
The race condition vulnerability CVE-2026-98432 in the Linux kernel TCP code affects distributions including Ubuntu and RHEL, was rated 9.8 by the kernel CVE team, and as of October 29 Ubuntu and RHEL had not yet released fixed kernels. Anthropic said its model Claude autonomously wrote a two-stage exploit chain: first leaking kernel addresses in about 48 minutes to bypass KASLR, then overwriting a callback pointer via a buffer overflow, and about 5 minutes later executing commands as root, targeting servers with multipath TCP enabled. The vulnerability is a use-after-free when IPv4 TCP establishes a connection, was introduced in Linux 4.4, and was fixed upstream on October 5 with thanks to Anthropic researcher Xinyang Ge.
- Hacker NewsHacker News· DiscussionDiscovering and exploiting vulnerabilities in critical software with Claude(opens the original post in a new tab)
- WeChatDoonsec· Media coverageAnthropic unreleased model can autonomously build multi-platform attack chains(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageUnreleased Claude model found attack chains in Chrome, Safari: Anthropic(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageAnthropic's secret AI extracted data from a locked Android phone and escaped the Chrome sandbox(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageClaude AI discovers Android and Linux system vulnerabilities, breaches Linux in 53 minutes to gain highest privileges(opens the original post in a new tab)
- Hacker NewsHacker News· DiscussionDiscovering and exploiting vulnerabilities in real-world software with Claude(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageAnthropic's secret AI extracted data from a locked Android phone and escaped Chrome's sandbox(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageAnthropic's unreleased AI model builds working exploits for Chrome, Safari, Windows, Linux and Android(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageAnthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)· Media coverageClaude AI Builds One-Click Chrome and Zero-Click Linux Exploit Chains, Bypasses Android Lock Screen(opens the original post in a new tab)
- RedditReddit r/cybersecurity· DiscussionAnthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits(opens the original post in a new tab)
- The Hacker NewsSelectedAnthropic unreleased model chains multiple vulnerabilities into working Chrome, Safari, Windows and Linux exploit chains
Anthropic says one of its unreleased internal research models discovered multiple vulnerabilities in Chrome, Safari, Android, Windows and Linux in experiments and chained them into working proof-of-concept exploit chains; all vulnerabilities were reported to vendors first and have been fixed, and none have been seen in real attacks. An Anthropic Frontier Red Team article lists five chains: the Chrome chain uses four vulnerabilities to go from visiting a webpage to code execution outside the sandbox, fixed in Chrome 156; the Safari chain runs no code and, after disabling the same-origin policy, can read the user's login data on other websites, fixed in iOS and iPadOS 26.5.2; the Windows chain is a denial of service against a server responding to HTTP/3 requests (CVE-2026-33096); the Linux chain obtains a root shell without logging in when the target runs a multipath TCP listener (CVE-2026-98432).
- Hacker NewsHacker News· DiscussionDiscovering and exploiting vulnerabilities in critical software with Claude(opens the original post in a new tab)
- Hacker NewsHacker News· DiscussionDiscovering and exploiting vulnerabilities in real-world software with Claude(opens the original post in a new tab)
- Anthropic Red TeamingSelectedAnthropic used Claude to discover and exploit vulnerabilities in real-world critical software
Anthropic used an unreleased internal research model to discover serious vulnerabilities in Chrome, Safari, Android, Windows and Linux, write five attack chains requiring little or no user interaction that achieve effects such as remote code execution, and report them to vendors under coordinated disclosure. The Chrome one-click RCE chain chained together vulnerabilities including a V8 heap corruption, a sandbox escape and a FedCM use-after-free; 62 CVEs were fixed in Chrome 156, all critical or high severity. The Safari chain bypassed the same-origin policy to read sensitive data such as cookies, and Apple confirmed and fixed it the same day; the Android lock-screen bypass could extract personal information such as photos without unlocking the device. The Windows kernel QUIC out-of-bounds read (CVE-2026-33096) and the Linux kernel multipath TCP race condition vulnerability (CVE-2026-98432) have both been fixed.
Related discussion
- X@DarkWebInformer · Dark Web Informer🚨 Critical Linux kernel TCP flaw enables remote root code execution; CVE-2026-98432 A race condition in the Linux kern…(opens the original post in a new tab)
226 likes · 2 comments·Oct 30 08:41Collect
- X@ArgileNoland · Bud C. 🇺🇸An unreleased Claude wrote working exploits for Chrome, Safari, and Linux. Anthropic says frontier models can now chain…(opens the original post in a new tab)
- X@Zen_with_AI · 山景城小路For those running Ubuntu themselves, a 9.8 high-severity vulnerability; patch quickly. Linux kernel high-severity vulnerability CVE-2026-98432. The problem is in the IPv4 TCP network stack: when processing connection requests concurrently, memory may be freed early while still in use, forming a use-after-fre...(opens the original post in a new tab)
29 likes · 7 comments·Oct 30 08:41Collect
- X@TheHackersNews · The Hacker News‼ Linux kernel TCP flaw rated 9.8 CVSS. Anthropic demonstrated an exploit that runs commands as root on servers using…(opens the original post in a new tab)
619 likes · 26 comments·Oct 30 08:41Collect
- X@__rkaneko · 📡 rkaneko 📡Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits https://thehackern…(opens the original post in a new tab)
- X@cyb3rops · Florian Roth ⚡CVE-2026-98432 is a good example of something that really concerns me about the future of cybersecurity. https://ubunt…(opens the original post in a new tab)
261 likes · 35 comments·Oct 30 08:41Collect
- X@RoundtableSpace · 0xMarioNawfalAnthropic just showed an unreleased Claude research model autonomously discovering and chaining critical real-world exp…(opens the original post in a new tab)
83 likes · 16 comments·Oct 30 08:41Collect
- Hacker NewsHacker NewsDiscovering and exploiting vulnerabilities in critical software with Claude(opens the original post in a new tab)
4 points·Oct 30 08:41Collect
- X@KowalPrato4o · Kowal PratorAn unreleased model dug up 62 Chrome vulnerabilities on its own. Anthropic Frontier Red Team: internal Claude discovered 62 high-severity/critical Chrome vulnerabilities, all of which have entered the Chrome 156 patch; it also chained 4 of them into a sandbox escape…(opens the original post in a new tab)
2 comments·Oct 29 20:34Collect
- WeChatDoonsecAnthropic unreleased model can autonomously build multi-platform attack chains(opens the original post in a new tab)
- WebAI Threat Watch (aithreat.io)Unreleased Claude model found attack chains in Chrome, Safari: Anthropic(opens the original post in a new tab)
- X@Rachidmarcil · Ai newsAnthropic: an unpublished research model built 5 exploit chains — Chrome sandbox escape, Safari same-origin bypass, pho…(opens the original post in a new tab)
1 comments·Oct 30 03:40Collect
Attention trend
New sources per day
- Oct 27: 1 new sources (1 outlets, 0 accounts)
- Oct 28: 48 new sources (3 outlets, 45 accounts)
- Oct 29: 23 new sources (1 outlets, 22 accounts)
- Oct 30: 4 new sources (1 outlets, 3 accounts)