Anthropic researchers using an experimental Claude model demonstrated how a malicious webpage can bypass Chrome protections and execute applications silently.

Findings

In a test on macOS the researchers opened the Calculator app without further user interaction, illustrating the exploit’s impact on local execution.

Google responded by releasing security updates addressing multiple vulnerabilities, including 4 critical vulnerabilities, according to company disclosures in a security bulletin.

Researchers hunting for these flaws combined work using Claude with findings from OpenAI Codex Security participants, the report publicly states.

Scope and fixes

Anthropic also reported that similar techniques allowed access to Safari cookies and history, and extraction of data from a locked Pixel 9 device.

The team additionally identified dangerous vulnerabilities affecting both Linux and Windows environments; Anthropic says the issues have already been patched.

Recommendations

Users are advised to install available browser and operating system updates to ensure fixes are applied and potential exploitation is prevented.

To update Chrome open Settings → Help → About Google Chrome, which triggers automatic installation of any available updates on most systems.

For macOS and other platforms, use the system Software Update or Settings menus to check for and install pending operating system patches promptly.