Anthropic says unreleased Claude built patched lab exploit chains
October 30: CSO Online says CVE-2026-98432 scores 9.8, affects branches back to 4.4, and Ubuntu plus Red Hat Enterprise Linux still lacked patched kernels, while Debian, Oracle, SUSE and Amazon Linux have some fixes.
Anthropic says an unreleased Claude model built lab-only browser and OS exploits that vendors patched, while some Linux distros still lack CVE-2026-98432 fixes.
Anthropic’s Frontier Red Team says an unreleased Claude research model, after prompting, produced multi-step lab proof-of-concept exploit chains for Chrome, Safari, Android, Windows and Linux. The company says the proofs were not seen in real attacks, issues were reported before an October 27 publication, and affected vendors shipped fixes. It reports 62 critical or high Chrome issues fixed as of Chrome 156; a four-bug chain reaches code execution outside the sandbox. Apple shipped a data-only Safari same-origin fix, and Google says the locked Pixel 9 USB issue is addressed. The Hacker News and Cyber Security News say public records for Windows CVE-2026-33096 and Linux CVE-2026-98432 do not fully match Anthropic’s descriptions. CSO Online says the Linux flaw scores 9.8, reaches branches back to 4.4, and as of October 30 Ubuntu and Red Hat Enterprise Linux had not shipped patched kernels.
- Google assigned 62 critical or high Chrome CVEs, fixed as of Chrome 156.
- Chrome chain used four flaws, ending in a FedCM use-after-free sandbox escape.
- Locked Pixel 9 test needed physical USB access to read photos and files.
- CVE-2026-98432 needs an exposed MPTCP listener and scores CVSS 9.8, according to CSO Online.
- Ubuntu and Red Hat Enterprise Linux had not shipped patched kernels as of October 30.
- Windows issue is described as denial of service and was not in CISA’s exploited catalog.
Timeline
dated events in the reporting · oldest first- Oct 15, 2026Ubuntu published the CVE-2026-98432 entry. · Cyber Security News
- Oct 27, 2026Anthropic published lab exploit-chain findings after vendor reporting. · Cyber Security News
- Oct 28, 2026Ubuntu updated its CVE-2026-98432 entry. · Cyber Security News
- Oct 30, 2026Ubuntu and RHEL still had not shipped patched kernels. · CSO Online
What each outlet adds
beyond the shared facts- The Hacker NewsSays public Windows and Linux CVE records do not fully match Anthropic.
- GBHackersNames Windows QUIC crash CVE-2026-33096 and estimates exposed HTTP/3 servers.
- Cyber Security NewsUbuntu CVSS 9.8 entry omits multipath TCP; three Ubuntu releases still vulnerable.
- Dark ReadingAnthropic said the model produced five working exploits.
- CSO OnlineAdds RHEL status, kernel 4.4 reach, and extra fixed releases.
Coverage
oldest first · one row per article · UTC- · 2d ago
Lobsters · securityFirst report
Anthropic says Claude built critical exploit chains in Chrome, Safari and Android
Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.
- · 2d ago
The Hacker News
Anthropic's unreleased model chained flaws into patched OS exploits
Lab proofs, not live attacks, covered Chrome 156, iOS 26.5.2, Windows CVE-2026-33096, and Linux CVE-2026-98432.
- · 2d ago
Malwarebytes Labs
Chrome 156 and Firefox 159 patch critical memory-safety flaws
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
- · 2d ago
Cyber Security News
Unreleased Claude model wrote Chrome, Linux and Android exploit chains
Anthropic says the lab-only chains were reported first and fixed, including Chrome 156, with no real-world incidents.
- · 2d ago
GBHackers
Anthropic says unreleased Claude built Chrome, Android and Linux exploits
Vendors were notified first; Chrome 156 fixed 62 CVEs, and the Linux root flaw is CVE-2026-98432.
- · 2d ago
SecurityWeek
Chrome 156 and Firefox 159 patch more than 200 flaws
CVE-2026-118306 can run arbitrary code outside Chrome's sandbox from a crafted HTML page; no in-the-wild exploitation is mentioned.
- · 1d ago
Claude research model wrote a root exploit for Linux CVE-2026-98432
Anthropic calls it a lab test, not a real incident; upstream kernels are patched but several Ubuntu releases remain vulnerable.
- · 1d ago
Dark Reading
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
- · 6h ago
The Decoder
GLM 5.3 built Firefox exploit chains from public patch gaps
Epoch AI says each successful chain cost about $1,000 and Mozilla fixed the rediscovered bug in Firefox 159.0.
- · 6h ago
CSO Online
Linux MPTCP flaw enables remote root; Anthropic shows exploit (CVE-2026-98432)
The kernel use-after-free scores 9.8, hits branches back to 4.4, and needs an exposed MPTCP listener.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-118306 | Critical sandbox-escape memory corruption in Google Chrome FileSystem | 9.6 | — | ||
| CVE-2026-33096 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network | 7.5 | 1% | ||
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×15 |