Google awarded XBOW $250,000 after researchers combined three Chrome vulnerabilities into an AI-assisted exploit chain enabling code execution outside the browser’s renderer sandbox on Windows. XBOW says the team spent six days developing the chain and incurred about $40,000 in model API charges. The vulnerabilities are now fixed. The company... Weiterlesen: Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows …
Intelligence View
⚡ tsecurity.de Intelligence
Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution
Google awarded XBOW $250,000 after researchers combined three Chrome vulnerabilities into an AI-assisted exploit chain enabling code execution outside the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
13 Quellen
CVE-2026-101943 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon input validation (WID-SEC-2026-3976)
12 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-101944 | Juniper Junos OS/Junos OS Evolved RPD integer overflow (WID-SEC-2026-3976) VVulDB Updatesvor 2 Std.CVE-2026-101945 | Juniper Networks Junos OS/Junos OS Evolved rpd process integer overflow (WID-SEC-2026-3976) VVulDB Updatesvor 2 Std.CVE-2026-101946 | Juniper Networks Junos OS/Junos OS Evolved rpd process out-of-bounds (WID-SEC-2026-3976) VVulDB Updatesvor 2 Std.CVE-2026-101948 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon null pointer dereference (WID-SEC-2026-3976) VVulDB Updatesvor 2 Std.CVE-2026-101949 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon null pointer dereference (WID-SEC-2026-3976) VVulDB Updatesvor 4 Std.CVE-2026-101936 | Juniper Networks Junos OS up to 26.2R1-S1 srxpfe assertion (WID-SEC-2026-3976)
+6
10 Quellen
ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
9 weitere Quellen
ZZDI: Published Advisoriesvor 15 Std.ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability
+3
8 Quellen
ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
7 weitere Quellen
ZZDI: Published Advisoriesvor 15 Std.ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability ZZDI: Published Advisoriesvor 15 Std.ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability VVulDB Updatesvor 2 Std.CVE-2016-0012 | Microsoft Office up to 2016 ASLR information disclosure (MS16-004 / Nessus ID 87882) VVulDB Updatesvor 2 Std.CVE-2016-0448 | Oracle Java SE 6u105/7u91/8u66 JMX information disclosure (Nessus ID 88060 / ID 350055) VVulDB Updatesvor 2 Std.CVE-2016-0706 | Apache Tomcat 6.0/7.0/8.0/9.0 StatusManagerServlet information disclosure (RHSA-2016:1087 / Nessus ID 88935) VVulDB Updatesvor 3 Std.CVE-2026-97666 | Sonatype Nexus Repository up to 3.96.x ExtDirect Endpoint information disclosure (EUVD-2026-102153)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4272095/it-security-nachrichten/google-pays-250000-for-ai-assisted-chrome-exploit-enabling-windows-code-execution/