XBOW builds a full Chrome exploit chain in six days
What happened
On October 14, 2026, a report on the Hacker News front page covered XBOW building a full Chrome exploit chain. XBOW completed the chain in six days, escalating JavaScript execution in an ordinary tab to code execution outside the renderer sandbox. Google paid a $250,000 reward for it. The report covers the build time, the privilege escalation the chain achieved and the reward amount. It does not describe the specific vulnerabilities, the affected Chrome versions or any fix progress.
Written by AI from the coverage · updated 3 hours ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pagePickXBOW builds a full Chrome exploit chain in six days
XBOW built a complete Chrome exploit chain in six days, escalating JavaScript execution in an ordinary tab to code execution outside the renderer sandbox. Google paid a $250,000 bounty for the chain.
Heat over time
Not enough continuous observations to draw a trend yet.