Anthropic says Claude built critical exploit chains in Chrome, Safari and Android
Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.
76
- Mentions · 7d3
- Mentions · 30d7
- All mentions28
- First seenAug 20, 2026
- Last mentioned3d ago
Timeline
28 articles · newest firstProject Zero: BigSleep beat Fuzzilli on V8 bugs, overlap partial
In six months BigSleep reported 45 V8 vulnerabilities to Fuzzilli's 37, and experiments put theoretical overlap near 60%.
58
SecPRBench measures agentic security review on real bug-introducing commits
Recall spans 32.5% to 78.1% across eight frontier models on 265 tasks from nine systems, led by Grok 4.6 and GPT-6 sol.
48
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google patched ten Chrome 155 flaws, including critical Prerender use-after-free CVE-2026-110922, with no known exploitation.
68
Update Chrome and ChromeOS to fix critical security issues
Google patched Chrome and ChromeOS, including critical sandbox-escape use-after-free bugs.
68
Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws
Google patched 247 Chrome flaws, including four critical use-after-free bugs, in version 155.0.8059.39.
67
A Mere Mortal's Introduction to JIT Vulnerabilities in JavaScript Engines
TrustFoundry's guide explains JIT compiler bugs in JavaScript engines, using V8, D8, and a CTF example.
38
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google shipped Chrome 154 fixes for 32 flaws, including critical ANGLE bug CVE-2026-102331.
66
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
Google and Mozilla patched more than 100 Chrome and Firefox flaws, including critical CVE-2026-102331, with no known exploitation.
68
Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks
Google patched 108 vulnerabilities in Chrome 154, including critical memory-safety flaws that could enable remote code execution.
85
Chrome 153 Patches 16 Security Vulnerabilities Including Critical Dawn and WebGL Flaws
Google released Chrome 153 fixing 16 flaws, including critical use-after-free in Dawn (CVE-2026-93374) and buffer overflow in WebGL (CVE-2026-93372).
52
Google Chrome 153 Update Fixes 16 Security Flaws, Including Two Critical Vulnerabilities
Google released Chrome 153 fixing 16 vulnerabilities, including critical use-after-free in Dawn/WebGPU and a WebGL buffer overflow, across Windows, macOS, and Linux.
55
Update Chrome now to protect against an actively exploited vulnerability
Google shipped Chrome 153.0.8010.36/.37 fixing 230 flaws including actively exploited V8 out-of-bounds write CVE-2026-87491 enabling sandboxed code execution.
75
Google Chrome Zero-day Vulnerability Exploited in the Wild (CVE-2026-87491)
Google patched actively exploited Chrome V8 out-of-bounds write CVE-2026-87491; CISA added it to KEV with a September 23 patch deadline.
80
Google fixes the seventh actively exploited Chrome zero-day of 2026
Google patched 230 Chrome flaws in version 153.0.8010.36, including actively exploited V8 out-of-bounds write CVE-2026-87491 (CVSS 8.8), the seventh 2026 Chrome zero-day.
85
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility
Cloudflare rewrote the Workers (workerd) module registry for Node.js-compatible URL-based module resolution, shipped behind the new_module_registry flag with a 64 MiB bundle limit.
5
Chrome 153 Patches Seventh Zero-Day of 2026
Google patches Chrome V8 zero-day CVE-2026-87491, exploited in the wild, marking the seventh exploited Chrome zero-day of 2026, in an update fixing 230 flaws.
72
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google patches actively exploited Chrome V8 zero-day CVE-2026-87491, an out-of-bounds write enabling sandboxed code execution via crafted HTML pages.
82
Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)
Google patched actively exploited Chrome zero-day CVE-2026-87491, a V8 out-of-bounds write enabling sandboxed code execution, in Chrome 153.0.8010.36+.
80
Google Chrome 153 Released With 230 Security Fixes and Zero-Day Exploited in the Wild
Google released Chrome 153 with 230 security fixes, patching CVE-2026-87491, a V8 out-of-bounds write zero-day actively exploited in the wild.
82
Chrome 153 Fixes 230 Vulnerabilities, Including One 0-Day Exploited in the Wild
Google shipped Chrome 153 with 230 fixes, including CVE-2026-87491, a V8 out-of-bounds write zero-day exploited in the wild.
78
Google patches actively exploited Chrome zero-day (CVE-2026-85046)
Google patches actively exploited Chrome zero-day CVE-2026-85046, a V8 type confusion bug enabling sandboxed code execution via crafted HTML pages.
85
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Chrome V8 type-confusion flaw CVE-2026-85046 (CVSS 8.8) to its KEV catalog; Google patched it in Chrome 152.
82
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-85046, a Google Chromium V8 type confusion vulnerability with evidence of active exploitation, to its KEV Catalog.
80
CISA KEV: Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 (CVE-2026-85046)
CISA added actively exploited Chromium V8 type confusion CVE-2026-85046 to the KEV catalog, requiring federal mitigation by September 18.
85
Two critical Chrome flaws put users at risk on malicious websites
Google patched 26 Chrome flaws, including two critical use-after-frees and an actively exploited V8 sandbox escape (CVE-2026-85046); update to 152.0.7977.82/.83.
85
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
Check Point's hasherezade details static deobfuscation of JSCeal, a V8-bytecode stealer targeting cryptocurrency applications since March 2024.
55
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Critical type-confusion flaw in isolated-vm Node.js sandbox (GHSA-864f-rcv7-6rh4) enables guest-to-host escape and potential RCE; fixed in 6.2.0 and 7.0.1.
58
Related CVEs
by mentions- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
- CVE-2026-244155%8.8Use-After-Free in Google Chromium CSS Rendering Exposes Chrome, Edge, Opera Users
- CVE-2026-116452%8.8Out-of-Bounds Read/Write in Google Chrome V8 Enables In-Sandbox Code Execution
- CVE-2026-528114%8.8Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution
- CVE-2026-39103%8.8Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution
- CVE-2026-39092%8.8Out-of-Bounds Write in Google Chrome's Skia Rendering Engine
- CVE-2026-87527<1%9.6Heap Buffer Overflow in Google Chrome WebGL Enables RCE Outside the Sandbox
- CVE-2026-87464<1%9.6Use-After-Free in WebGL in Google Chrome Allows Code Execution Outside the Sandbox
- CVE-2026-87628<1%8.3Use-After-Free in Google Chrome Cast Allows Sandbox-Escaping Code Execution
Appears with
- Googlevendor · 24
- Chromeproduct · 13
- Googleorganization · 11
- Google Chromeproduct · 8
- WebGLproduct · 7
- Seoul National Universityorganization · 5
- ANGLEproduct · 5
- Chromiumproduct · 4
- Node.jsproduct · 3
- Compsec Laborganization · 3
- CISAvendor · 3
- Claudeai model · 3
- PDFiumproduct · 3
- CISAorganization · 3
- Anthropicorganization · 3
- Dawnproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.