Evidence · DiggingBeagle record
XBOW Labs: Zero to Calc in Six Days, full Chrome exploit chain
Technical Oct 13 research account of V8 Maglev, animated WebP and Crashpad issues, with a tested Windows sandbox-escape chain.
- Source role
- primary disclosure
Evidence record
Technical Oct 13 research account of V8 Maglev, animated WebP and Crashpad issues, with a tested Windows sandbox-escape chain.
Claim-level citations (3)
- supportsXBOW assembled a Chrome three-stage exploit chain with agent assistance: The technical post describes six days for the demonstrated chain and AI-assisted parallel exploit work rather than a wholly unattended one-model exploit.
Background and Conclusions
- supportsXBOW assembled a Chrome three-stage exploit chain with agent assistance: The submitted chain combined a V8 Maglev deoptimization issue, an animated-WebP image-state confusion, and a Crashpad memory-safety issue.
Stage 1 / Stage 2 / Stage 3 and conclusions
- supportsXBOW assembled a Chrome three-stage exploit chain with agent assistance: XBOW reported a successful Calculator launch outside Chrome’s renderer sandbox in controlled testing and a $250,000 reward.
Introduction; Google acceptance and reward discussion