Anthropic says Claude built exploits for major browsers and systems

An unreleased version of Anthropic’s Claude model is claimed to have identified and chained multiple vulnerabilities across Chrome, Safari, Android, Windows and Linux to produce five working exploits, Anthropic said this week. The exploits reportedly enabled distinctive activities such as data theft from a locked Android smartphone, a zero‑click remote code execution with root privileges on Linux servers, and the remote disruption (DoS) of Windows systems. Anthropic noted that all five exploits were demonstrated using the model, and that affected vendors subsequently addressed the flaws.

Chromium‑based Chrome exploits involved a chain of four vulnerabilities in Chrome’s JavaScript engine, memory protections, process isolation, and federated sign‑in functionality; Google Chrome has since patched the issues, with 62 vulnerabilities reported to Google all having CVE identifiers and rated high or critical. Safari’s chain combined four Safari weaknesses to bypass the same-origin policy, potentially allowing access to a user’s browsing history, cookies and session data; Apple fixed the issue.

The Android chain targeted a Pixel 9, exploiting three vulnerabilities in device transfer and USB handling to exfiltrate photos and personal data; Google addressed the flaw. The Windows exploit entailed a remotely exploitable DoS via an out‑of‑bounds read in the Windows kernel’s HTTP/3 transport protocol implementation, with Microsoft patches issued.

Linux featured a zero‑click attack against the kernel’s networking stack that could yield root access to unauthenticated attackers, CVE‑2026‑98432, patched upstream and backported to maintained stable kernels.

Anthropic’s Frontier Red Team framed the findings as evidence that frontier AI can craft multi‑step exploits, while noting that verifiable success rates, cost, and human effort remain unstated by the report. The company promotes a Cyber Verification Program to broaden defender access to Claude’s capabilities.