GoKawiil
Tech News
A bug report filed as issue #25921 states that OpenAI's Codex Desktop application continuously generates Crashpad pending dump files with no cleanup mechanism. The reporter estimates the dumps grow by at least 5GB per day, consuming disk space indefinitely if left unaddressed.
XBOW developed a Chrome full-chain exploit combining a V8 compiler bug, an animated-WebP decoder bug, and a Crashpad memory-safety flaw, enabling code execution outside the renderer sandbox from a single web page. Google awarded it the first $250,000 payout under Chrome's new full-chain VRP rules introduced in April 2026. The chain was produced in six days by AI agents running OpenAI's gpt-5.6-sol model, guided by human researchers, at an estimated API cost of $40,000.