Google patched 382 vulnerabilities in Chrome 151, most discovered internally, with 15 critical and 67 high severity flaws. The vulnerabilities involve memory corruption and logic errors such as use-after-free, out-of-bounds access, and type confusion, primarily impacting the renderer process. Exploitation could lead to arbitrary code execution inside the renderer sandbox and, in some cases, sandbox escape for full system compromise. No active exploitation is currently known. The surge in discovered flaws is attributed to increased use of AI tools by Google, though specifics are undisclosed.

Successful exploitation of these vulnerabilities could allow remote attackers to execute arbitrary code within the Chrome renderer sandbox. Some vulnerabilities may enable attackers who have compromised the renderer to escape the sandbox and execute code on the host system. This poses a critical risk to user security and system integrity. However, no evidence of exploitation in the wild has been reported so far.

Google has released Chrome 151 which includes patches for all 382 vulnerabilities. Users and organizations should update to Chrome 151 or later to mitigate these security risks. There is no indication that additional mitigation steps are required beyond applying the official update.