Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Anthropic says Claude built critical exploit chains in Chrome, Safari and Android

Original title: Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Lobsters · securityby anthropic.com via vaguelytagged ()8 min read4 · 2 reads
Read at anthropic.com
Part of a story covered by 10 sourcesAnthropic says unreleased Claude built patched lab exploit chainsMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.

Anthropic says an unreleased internal Claude research model, after prompting, produced multi-step exploit chains in widely used browsers and operating systems. The Chrome chain reaches code execution outside the sandbox; the Safari chain bypasses the same-origin policy without arbitrary code execution; the Android chain reads data from a locked phone over USB. Anthropic reported the issues under a 90-day disclosure window. Google, Apple and Google’s Android team have shipped fixes; a Windows denial-of-service section is cut off.

Unconfirmed: Individual CVE identifiers are not listed, and the Windows denial-of-service description is truncated.

Key facts
  • Sixty-two Chrome CVEs, all critical or high, are patched as of Chrome 156.
  • The Chrome chain used V8 corruption, a CacheStorage race and a FedCM use-after-free.
  • Safari’s chain is a data-only same-origin bypass, and Apple has shipped a fix.
  • The Android chain was tested on a Pixel 9; Google says the issue is addressed.
Security assessment · AI, from the articlePublic proof of concept

Impact: Remote code execution or access to browser and device data

ProductAffectedFixed in
Google Chrome—Chrome 156
Apple Safari——
Google Android——
Microsoft Windows——
What to do
  1. 1.Update Chrome to the release that includes the Chrome 156 patches.
  2. 2.Install the Safari fix Apple says is available to users.
  3. 3.Apply Google’s fix for the Android lock-screen bypass.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1203 Exploitation for Client ExecutionT1068 Exploitation for Privilege Escalation
Tags
chromesafariandroidv8claudecoordinated-disclosure
Vendors
GoogleAppleMicrosoft
Products
ChromeSafariAndroidWindowsV8JavaScriptCore
Organizations
Anthropic
AI models
Claude

From the original article

8 min read at anthropic.com

Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the world’s most widely used software, such as browsers and operating systems. In this post, we share details of five attack chains, which led to remote code execution and other critical impacts with little to no user interaction.

Lobsters · security

By anthropic.com via vaguelytagged · anthropic.com

Read the full article at Lobsters · security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.