Primary sourceIT之家
View sourceEvent ·Multi-source
Anthropic：Claude 在 Chrome、Safari、Android 等发现多个漏洞并串联成攻击链
Anthropic 于 10 月 27 日发布报告，用一个未公开发布的内部 Claude 研究模型在 Chrome、Safari、Android、Windows 和 Linux 中发现漏洞。其中 Chrome 相关报告产生 62 个严重或高危 CVE，包括 13 个沙箱逃逸漏洞，修复已随 Chrome 156 发布。Android 攻击可在 Pixel 9 锁屏状态下通过 USB 提取照片，Linux 漏洞 CVE-2026-98432 允许零点击获取 root 权限，验证全程耗时 53 分钟。报告共梳理出 5 条可实际运行的攻击链，相关漏洞均已按协调披露流程报告并修复。
Current read
Anthropic 让 Claude 自己找漏洞写利用代码，Chrome 一家就报了 62 个 CVE，还能锁屏的 Pixel 9 里掏照片，安全圈该看看。
11 sources88° AI heatLast updated 2026/10/28 22:35:25
Evidence
11 sourcesRelated source 1Andrew Curran
View sourceRelated source 2SoyaCincau
View sourceRelated source 3爱范儿
View sourceRelated source 4岚叔
View sourceRelated source 5Latent Space (swyx)
View sourceRelated source 6kimmonismus
View sourceRelated source 7Anthropic
View sourceRelated source 8AIGCLINK
View sourceRelated source 9TestingCatalog
View sourceRelated source 10@koltregaskes
View sourceConflict check
Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.