XBOW chained three unknown Chrome bugs into a Windows exploit that runs on page load, built in six days with a public OpenAI model, it said. Google fixed all three and paid its $250,000 top reward; the fixes apply only after Chrome restarts.
Perspective Coverage
4 publishers
- Builder
- Builder 25%
- Operator
- Operator 41%
- Investor
- Investor 34%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+30
- Incentives70
- Confidence72
Chrome 155 stable update closes 37 security flaws, seven rated Critical
Google's Chrome 155 stable update, versions 155.0.8059.79/.80, fixes 37 security flaws, seven of them rated Critical. Malwarebytes says auto-update can stall on a browser that never closes or one with a blocking extension, so the installed build number is the thing to verify.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap−5
- Incentives
- Not scored
- Confidence60
Attackers chain V8 Maglev bugs with sandbox escapes against Edge and Chrome builds missing the fix
Microsoft says attackers chained V8 Maglev code-execution bugs with V8 sandbox escapes against Edge and Chrome users who lacked the fixes. Chrome Stable's matching update arrived four days after Edge's, on 8 September.
Publishers:microsoftedge.github.io
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence55
Google quadrupled the Chrome VRP base reward for memory corruption bugs to $2,000, up from the $500 it set in April. SecurityWeek reports the new rates are still well below those paid before April, so the change restores part of a cut.
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence68
Researchers at haveibeensquatted.com found three Cyrillic letters that still break Chromium's whole-script lookalike check in current Chrome. A name built on one can display close to a real brand, so the address bar is a weaker check than users are taught.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence62
Google's October 6 Chrome desktop update fixes 247 security flaws, four of them rated Critical. The fixes apply when Chrome relaunches, so a browser nobody closes keeps running the vulnerable build until someone restarts it.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+5
- Incentives30
- Confidence70
buildOne report1 publisher Chrome 155 decodes JPEG XL natively through jxl-rs, a decoder rewritten in Rust
Google's Chrome 155 decodes JPEG XL natively with jxl-rs, the browser's first complete image decoder written in a memory-safe language. Any site can now serve .jxl images to Chrome without plugins or experimental flags, so the format is a production option for Chrome traffic.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives45
- Confidence55
buildConfirmed2 publishers Lightpanda shipped 1.0 of its open-source browser on October 2nd, passing 1,739,845 web-platform subtests without rendering pages. One encoding suite makes up about two-thirds of that count, so teams should judge it by whether their jobs need to see the page.
Reality
- Evidence55
- Adoption35
- Hype gap+25
- Incentives70
- Confidence60
buildConfirmed2 publishers Hacktron reports that GPT-5.6 Sol Ultra built a complete Chrome/V8 exploit chain in a controlled test for $1,596.89 of model compute. The benchmark handed the model the source tree and the public security-fix commits, so the figure covers only the compute for one lab task.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+45
- Incentives70
- Confidence55
LastPass turns its password manager extension into a shadow AI monitor for Business Max
LastPass added shadow AI discovery and sensitive-data warnings to Business Max, run from the browser extension its customers already use. Teams on that tier get a warning and an audit log for browser AI use, and the release describes hard blocks only for web categories.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+25
- Incentives75
- Confidence45
CVE-2026-87491 gives a crafted web page code execution inside Chrome's sandbox. The fix only takes effect when the browser restarts, and long-running sessions carry that exposure until they do.
Perspective Coverage
5 publishers
- Builder
- Builder 14%
- Operator
- Operator 80%
- Investor
- Investor 6%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap0
- Incentives30
- Confidence70
Google shipped 108 security fixes to the Chrome stable channel on September 22, eleven of them rated Critical and seven of those in graphics components a crafted page can drive. None were reported as exploited.
Reality
- Evidence72
- Adoption55
- Hype gap+10
- Incentives42
- Confidence70
Espionage crews exploited a Chrome flaw that Chromium had already fixed in public source
Proofpoint says a shared toolkit called BlueMoon chained two V8 flaws that Chromium had fixed in public but Chrome had not yet shipped, plus a Windows kernel bug that elevates only on older builds.
Reality
- Evidence62
- Adoption58
- Hype gap+18
- Incentives66
- Confidence58
buildOne report1 publisher Chrome adds V8's in-process sandbox to its bug bounty before calling it a strong boundary
V8 says 60% of the Chrome exploits caught in the wild between 2021 and 2023 started in its own code, and that the logic bugs behind them are out of reach of both Rust and memory tagging, so the work went into containment.
Publishers:v8.dev
Reality
- Evidence62
- Adoption35
- Hype gap−10
- Incentives70
- Confidence58
Anthropic's most capable model built working exploits from 16 of 39 published patches
Anthropic's red team says the scarce reverse-engineering skill that used to give defenders weeks is no longer the bottleneck. It measured that on Firefox and Windows kernel fixes, where a 19-day median gap counts as fast.
Reality
- Evidence55
- Adoption20
- Hype gap+22
- Incentives72
- Confidence48
Google says an exploit exists in the wild for CVE-2026-85046, a type confusion in Chrome's V8 engine, and it is the sixth Chrome zero-day the company has patched under active attack since January.
Perspective Coverage
9 publishers
- Builder
- Builder 25%
- Operator
- Operator 70%
- Investor
- Investor 5%
Reality
- Evidence78
- Adoption52
- Hype gap+8
- Incentives58
- Confidence74
Two of the patched bugs need nothing more than a page load, according to Malwarebytes. Chrome applies fixes on restart, so uptime is the exposure operators actually own.
Reality
- Evidence78
- Adoption60
- Hype gap+12
- Incentives55
- Confidence74
buildOne report1 publisher Pass-ta-key breaks Chrome's device trust, not WebAuthn: harden the endpoint, keep the rollout
Unit 42's three techniques all assume malware is already running on the box. That makes this an endpoint and browser-profile problem, not a reason to stall a passkey deployment.
Reality
- Evidence44
- Adoption24
- Hype gap+12
- Incentives41
- Confidence42