grep -rl "CVE-2026-78952" ./articles
XBOW's six-day, AI-assisted Chrome exploit chain was reported everywhere this week. Google's own issue tracker carries the part that was not: what the Vulnerability Rewards Program paid for each of the three bugs on its own, and which of them never got a CVE at all.
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
Not listed in CISA's Known Exploited Vulnerabilities catalog as of catalog 2026.10.15. That is not evidence it is not being exploited — the catalog records what CISA has confirmed, and identifiers have been attacked for days before appearing in it.
XBOW's six-day, AI-assisted Chrome exploit chain was reported everywhere this week. Google's own issue tracker carries the part that was not: what the Vulnerability Rewards Program paid for each of the three bugs on its own, and which of them never got a CVE at all.
../cve — every identifier we have covered