Anthropic says unreleased Claude built Chrome, Android and Linux exploits
Original title: Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
Vendors were notified first; Chrome 156 fixed 62 CVEs, and the Linux root flaw is CVE-2026-98432.
Anthropic’s Frontier Red Team said on October 27, 2026 that an unreleased research model, Claude, produced working exploit chains for Chrome, Safari, Android, Windows, and Linux, many with little or no user interaction. The Chrome chain escaped the sandbox and opened Calculator on macOS; Google assigned 62 CVEs, all fixed in Chrome 156. A Linux multipath-TCP race, CVE-2026-98432, allowed remote root commands and is patched in maintained stable kernels. Apple, Google, and kernel maintainers shipped fixes; the Windows QUIC crash is CVE-2026-33096.
Unconfirmed: Server-exposure figures and how independently Claude worked are Anthropic’s claims; attacker use is not stated.
- The Safari chain bypassed the same-origin policy without running arbitrary code.
- On a locked Pixel 9, three USB checks were skipped to read photos and personal data.
- Anthropic estimates several million internet-facing servers answer the affected HTTP/3 path.
- Anthropic says partners verified at least 129,000 flaws between April and July 2026.
Impact: Sandbox escape, data theft, crashes, or remote root commands
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | — | Chrome 156 |
| Apple Safari | — | — |
| Google Android | Google Pixel 9 | — |
| Microsoft Windows | — | — |
| Linux kernel multipath TCP | — | all maintained stable kernels |
- 1.Install Chrome 156 and the shipped Safari, Android, and Windows fixes.
- 2.Update maintained stable Linux kernels for CVE-2026-98432.
- AI models
- Claude
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-33096 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network | 7.5 | 1% | ||
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×15 |
From the original article
3 min read at gbhackers.com
Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company’s Frontier Red Team shared these findings on October 27, 2026. Many exploit chains required minimal or no user interaction, and the team reported every identified flaw to the respective vendor before publication.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.