Discovering and exploiting vulnerabilities in real-world software with Claude
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Anthropic describes five exploit chains its unreleased research model produced against Chrome, Safari, Android, Windows QUIC and the Linux kernel, including a one-click Chrome escape and a zero-click Linux root exploit that took 53 minutes in a proof of concept. Patches and the 62 Chrome CVEs are reported by Anthropic and were not independently verified, nor was the estimate of millions of exposed Windows servers. For builders, the stated lesson is to run many varied scanning agents and check code at pull-request time.