Anthropic used an unreleased Claude model to find critical vulnerabilities in Chrome, Safari, Android, Windows and Linux. It chained multiple bugs into one-click remote code execution in Chrome. It bypassed Safari’s same-origin policy to access user data without code execution. It extracted data from a locked Android phone via USB without unlocking it. It found a remote denial-of-service flaw in Windows’ QUIC implementation. It achieved zero-click root code execution on Linux via a kernel race condition. Google patched 62 Chrome CVEs, all rated critical or high. Apple fixed the Safari issue the same day. Google addressed the Android bypass. Microsoft patched the Windows flaw as CVE-2026-33096. The Linux vulnerability was patched upstream as CVE-2026-98432. Anthropic reports all findings under a 90-day disclosure window. It now offers advanced cyber capabilities to defenders via its Cyber Verification Program.
What changed
Vulnerability discovery relied on specialist teams with deep target expertise and high human involvement.
What it unlocks
Automated discovery and chaining of multi-step exploits in widely used software with minimal human input.
- 62 CVEs assigned in Chrome
- 13 sandbox escapes in Chrome
- 21 renderer-compromise vulnerabilities in Chrome
- 48 minutes to leak a kernel pointer
What you need to act on it
- access to an unreleased internal research model
- coordinated vulnerability disclosure process with vendors
Sources