Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
XBOW researchers used GPT-5.6 Sol to chain three Chrome bugs into remote code execution, now patched.
76
CVE-2026-78952
- CVSS 3.1
- 8.3 high
- EPSS
- <1%p31
- Published
- ·
- Modified
Description · NVD
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)