The post Anthropic AI Discovers 22 Firefox Vulnerabilities in Two Weeks appeared on BitcoinEthereumNews.com.

Tony Kim
Mar 06, 2026 11:13

Claude Opus 4.6 found 14 high-severity Firefox bugs, nearly a fifth of all critical vulnerabilities fixed in 2025. Mozilla shipped fixes to hundreds of millions of users.

Anthropic’s Claude Opus 4.6 identified 22 security vulnerabilities in Mozilla Firefox over a two-week period, with 14 classified as high-severity—representing nearly a fifth of all critical Firefox bugs remediated throughout 2025. The findings have already been patched in Firefox 148.0, protecting hundreds of millions of users. The collaboration marks a significant milestone in AI-assisted security research. Within twenty minutes of initial exploration, Claude discovered a Use After Free vulnerability in Firefox’s JavaScript engine—a memory flaw that could allow attackers to inject malicious code. By the time Anthropic researchers validated and submitted that first bug, the AI had already flagged fifty more unique crashing inputs. Speed That Human Researchers Can’t Match Anthropic scanned nearly 6,000 C++ files and submitted 112 unique reports to Mozilla’s Bugzilla tracker. The company chose Firefox specifically because it’s one of the most rigorously tested open-source projects in existence—making it a harder benchmark than typical targets. “Browser vulnerabilities are particularly dangerous because users routinely encounter untrusted content and depend on the browser to keep them safe,” Anthropic noted in their announcement. The JavaScript engine presented an especially critical attack surface since it processes external code whenever someone browses the web. Mozilla’s security team adapted their processes mid-collaboration, eventually encouraging Anthropic to submit findings in bulk without manually validating each one. Most issues shipped fixes in Firefox 148, with remaining patches coming in future releases. The Exploitation Gap—For Now Here’s where it gets uncomfortable. Anthropic also tested whether Claude could actually exploit the bugs it discovered. After spending roughly $4,000 in API credits across several hundred attempts,…

---

Filed under: News - @ March 7, 2026 12:22 am