Anthropic’s Claude model built five exploit chains in Chrome, Safari, Android, Windows and Linux, including zero-click root via CVE-2026-98432.