Critical 9.6
CVE-2026-85045
XBOW AI-Assisted Google Chrome Sandbox Escape Exploit Chain
Vendor / product: Google Chrome
Event date: 2026-10-13
Public PoC: Yes
First tracked by RiskWire: 2026-10-15
Sources & citations (43)
- Ερευνητές δημιούργησαν εκμετάλλευση $250,000 στον Chrome secnews.gr · 2026-10-14
- AI Hilesi, Google Chrome'daki Açıkları Altı Günde Ortaya Çıkardı tr.cryptonomist.ch · 2026-10-14
- 엑스보우 "10억명 쓰는 크롬에서 연쇄 취약점 발견" n.news.naver.com · 2026-10-14
- AI-Assisted Chrome Exploit Chains Three Flaws to Escape Sandbox, Earns $250,000 Bounty mallory.ai · 2026-10-14
- Chrome violato in 6 giorni con l'AI: Google paga 250.000 dollari ilsoftware.it · 2026-10-14
- Researchers use OpenAI to create $250,000 Chrome exploit in 6 days secnews.gr · 2026-10-14
- X보우, 크롬 연쇄 취약점 발견... 구글 버그바운티 25만달러 수상 v.daum.net · 2026-10-14
- Security researchers spent 6 days doing their Chromework, built 1B user exploit theregister.com · 2026-10-14
- Google pays $250K bounty for AI-assisted Chrome exploit built in six days cyberinsider.com · 2026-10-14
- XBOW 借助 GPT-5.6 Sol 模型攻破 Chrome 浏览器安全沙箱,获谷歌 25 万美元奖励 ithome.com · 2026-10-14
- Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution gbhackers.com · 2026-10-14
- Exploit XBOW Chrome: Cadena De Vulnerabilidades Y Bounty De $250K Con IA fvdigital.do · 2026-10-14
- AI 黑客在六天内揭示了 Google Chrome 的漏洞 cn.cryptonomist.ch · 2026-10-14
- XBOW beschreef een Chrome-exploitketen met AI neoteo.com · 2026-10-15
- Pesquisadores usam IA para encontrar falhas no Google Chrome e recebem R$ 1,4 milhão estadao.com.br · 2026-10-15
- Google concede USD $250.000 a XBOW por un exploit de cadena completa en Chrome diariobitcoin.com · 2026-10-14
- XBOW с помощью ИИ создала эксплойт Chrome для захвата Windows за шесть дней cisoclub.ru · 2026-10-14
- Eksploit Chrome: celah ditambal, perbarui browser journalarta.com · 2026-10-15
- Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6 cybersecuritynews.com · 2026-10-14
- Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days thehackernews.com · 2026-10-14
+23 more sources
References
See CVE-2026-85045 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →