XBOW builds a full Chrome exploit chain in six days

Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain

XBOW built a complete Chrome exploit chain in six days, escalating JavaScript execution in an ordinary tab to code execution outside the renderer sandbox. Google paid a $250,000 bounty for the chain.

Why it matters: XBOW split bug hunting and exploit development into parallel tasks with clear interfaces and fallback paths, so a duplicate bug could be swapped out without rebuilding the whole chain.