AI Pushes Chrome Bug Discovery Beyond Human Pace

Chrome’s patch count is only half the story. The bigger change is that Google is now using AI to find, triage, and help fix browser bugs, so the vulnerability inventory is growing faster than teams can assume from manual review alone. Google says Chrome 149 and 150 together fixed 1,072 security bugs, more than the previous 23 stable releases combined. Its AI-assisted review also found a sandbox escape that had been in the code for 13 years, and the latest Chrome 151 release adds 370 more fixes, including six named critical CVEs, for 151.0.7922.71/.72 on Windows and macOS and 151.0.7922.71 on Linux. For defenders, the practical shift is in how Chrome risk is being surfaced. Bug volume is no longer a clean proxy for exploit pressure, but it does mean fleet operators need to treat patch status as the baseline and expect more latent browser flaws to keep coming out of automated discovery.

Sources