VulnerabilityPublished 30 Jul 2026

Google says AI helped Chrome fix 1,072 security bugs in two releases

Source Bleeping Computer

Severity

Medium

Rated by Threat Radar

Data as of 2 Aug 2026, 00:01 UTC

What to do

AI-suggested

Google has already implemented fixes for the identified vulnerabilities in Chrome 149 and 150 releases. Users should update to the latest Chrome versions to benefit from these security improvements. The vendor is managing remediation actively and accelerating patch delivery through more frequent releases and dynamic patching. No additional user action beyond timely updates is currently required.

Description

Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent releases as it expands its use of AI. [...]

Impact

The impact is primarily positive, reflecting improved security posture of the Chrome browser through rapid identification and remediation of a large number of vulnerabilities, including critical issues such as a sandbox escape. This reduces the window of exposure for users and mitigates potential exploitation risks. There are no reports of known exploits in the wild related to these vulnerabilities. The accelerated patch cycle and dynamic patching efforts aim to minimize the time attackers have to reverse-engineer fixes before users receive updates.

Summary

Google's use of large language models and AI-powered agents in Chrome's vulnerability management process has dramatically increased the number of security bugs found and fixed, with 1,072 bugs patched in Chrome 149 and 150 alone. The AI systems assist in discovering flaws, reproducing reports, assigning severity, generating patches, and creating tests. This approach uncovered a sandbox escape vulnerability present for over 13 years. Google is also enhancing patch deployment speed by moving to a two-week major release cycle with weekly security updates and piloting bi-weekly security releases. Dynamic patching is under development to enable updates without browser restarts. The AI workflows complement existing fuzzing techniques and automate triage to save developer time. These improvements have prevented critical vulnerabilities from reaching production.

References

bleepingcomputer.com/news/google/google-says-ai-helped-chrome-fix-1-072-security-bugs-in-two-releases/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 30 Jul 2026, 17:22 UTC

References

Community reviews