SafetyPage

Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Blog postAnthropic27 Oct 202644 paragraphs

Read at anthropic.com
Cite
anthropic:discovering-vulnerabilities-with-claude/r1/b1
https://safetypage.noahairmet.com/d/anthropic/discovering-vulnerabilities-with-claude/r1/b1
@misc{anthropic2026,
  title = {Discovering and exploiting vulnerabilities in critical, real-world software with Claude},
  author = {{Anthropic}},
  year = {2026},
  url = {https://www.anthropic.com/research/discovering-vulnerabilities-with-claude}
}

Contents

  1. 1. One-click remote code execution in Chrome¶3
  2. 2. A one-click exploit chain in Safari¶10
  3. 3. Android lock screen bypass¶19
  4. 4. Windows remote denial of service¶27
  5. 5. Zero-click remote code execution in Linux¶31
  6. What we learned¶37
  7. What this means for defenders¶42