AI Generates Chrome Exploit and Angular SSR Flaw

Claude Opus AI Generates Functional Chrome Exploit for $2,283

• Researchers successfully leveraged Anthropic's Claude Opus large language model to generate a functional zero-day exploit for Google Chrome, costing approximately $2,283 in API usage.
• The AI-generated exploit targeted a use-after-free (UAF) vulnerability in Chrome's V8 JavaScript engine (CVE-2023-3079), which was capable of achieving remote code execution.
• This demonstration highlights the growing potential of advanced AI models to accelerate the discovery and weaponization of sophisticated software vulnerabilities, posing new challenges for browser security.

Source: The Register | Date: April 17, 2026

High-Severity SSRF Flaw Uncovered in Angular's Server-Side Rendering

• A high-severity Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2026-40502, was discovered in Angular's Server-Side Rendering (SSR) platform-server component.
• The flaw could allow attackers to perform origin hijacking and bypass security measures, potentially leading to unauthorized data access or internal network reconnaissance against affected web applications.
• Developers using Angular's SSR should update their platform-server packages to patched versions (e.g., 17.3.0, 16.2.13, 15.2.14, 14.2.15, 13.4.11, or 12.2.18) to mitigate the risk of exploitation.

Source: SecurityOnline.info | Date: April 18, 2026

References

1. Claude Opus wrote a Chrome exploit for $2,283 - The Register
2. High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering - SecurityOnline.info