Skip to content
Anthropic AI Model Reveals Critical Exploits in Chrome and Linux

Anthropic AI Model Reveals Critical Exploits in Chrome and Linux

First seen 28 Oct 2026, 14:44 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 16:11 UTC
  • •Anthropic's AI model discovered and chained multiple critical vulnerabilities.
  • •All identified flaws have been patched, with no known exploitation in the wild.
  • •The Chrome exploit involved a series of chained vulnerabilities leading to code execution.

An unreleased AI model from Anthropic identified multiple security flaws in Chrome, Safari, Windows, and Linux, chaining them into proof-of-concept exploits. The vulnerabilities have been patched, and no real-world attacks have been reported. The Chrome exploit involved a series of flaws that allowed code execution outside the browser's sandbox, while the Safari exploit bypassed the same-origin policy. Anthropic reported 62 flaws to Google, all rated critical or high. Specific CVEs include CVE-2026-98432, published on October 15, 2026, with a CVSS score of 9.8. The report raises questions about the extent of human involvement in the exploit development process. The company has not disclosed the model's name or detailed the human contributions to the exploit creation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-14
CVE-2026-33096 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-15
CVE-2026-98432 published
A critical vulnerability was disclosed with a CVSS score of 9.8, affecting Chrome.
Feeds.Feedburner
Recent
Flaws reported and patched
Anthropic reported 62 vulnerabilities to Google, all of which have been patched in Chrome 156.
Feeds.Feedburner

More articles in this cluster (3)

Following this threat?

Track Anthropic and CVE-2026-33096 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What systems are affected?
The vulnerabilities affect Chrome, Safari, Windows, and Linux systems.
Have these vulnerabilities been exploited in the wild?
No, Anthropic reported that there have been no real-world attacks using these exploits.
What should organizations do now?
Organizations should ensure they are running the latest versions of affected browsers and operating systems to mitigate risks.