Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain
Summary
XBOW details a Chrome full-chain exploit built in six days using AI agents, chaining vulnerabilities in V8, WebP, and Crashpad to achieve host code execution outside the renderer sandbox. The post highlights the vulnerabilities, exploit mechanics, and mitigations, and discusses the implications of AI-assisted exploit development for defense.