Google Chrome security overhaul: 1,072 bugs fixed and dynamic patching in development
Google announced that its Chrome browser fixed 1,072 security bugs in versions 149 and 150, a number that exceeds the total bugs fixed across the previous 23 milestone releases combined. The surge was driven by AI‑powered tools, including the Gemini model, which uncovered a sandbox‑escape vulnerability (CVE‑2026‑3545) that had lingered in the code for more than 13 years.
To keep pace with the faster discovery rate, Google is moving Chrome to a two‑week major‑release cadence starting September 2026 and is testing the delivery of two security updates per week. The company is also developing “dynamic patching” technology that can apply most updates without requiring the browser to be fully restarted, and is planning to incorporate memory‑safe languages such as Rust into Chrome components.
The next stable release, Chrome 151, began rolling out to desktop users and contains 370 additional security fixes, further illustrating the scale of the ongoing hardening effort.
Entities: Chrome Security Team · Chrome browser · Chrome version 149 · Chrome version 150 · Dynamic patching system · Gemini (Google AI model) · Gemini AI · Google Chrome · Google LLC
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 4 SOURCES] Google is moving Chrome to a two‑week major‑release cycle with weekly security updates and plans two security releases per week. (5b8cbdc0-70fb-4d06-8573-e2c5e64023c2,51cfcaf5-19c6-4b5e-9444-21ebd868c371,a78fb576-4636-4a92-887a-4628c99f7045,f91203a3-)
- [○ 1 SOURCE] Microsoft reported a record 570 security fixes, attributing part of the increase to AI tools. (f91203a3-fa2a-427d-bb5c-080abce91302)
- [● 8 SOURCES] The 1,072 bugs exceed the total number fixed across the previous 23 Chrome milestone releases. (Google)
- [● 6 SOURCES] Google is developing dynamic patching that can apply most Chrome updates without a full browser restart. (51cfcaf5-19c6-4b5e-9444-21ebd868c371,38a9fe69-0838-490a-994c-33235470d0ce,5b8cbdc0-70fb-4d06-8573-e2c5e64023c2,b8e80ae6-)
- [● 14 SOURCES] Google fixed 1,072 security bugs in Chrome versions 149 and 150. (Google)
- [● 4 SOURCES] Google’s Gemini AI discovered a sandbox‑escape vulnerability that had existed in Chrome for more than 13 years. (f9cfb3a6-af51-4420-bc57-fd6cd25dd866,77d0d51e-9cea-4e74-9583-881c20f8ee11,1c6420a5-9506-402b-8e65-9b0821f5cc80,ad2f0948-)
- [● 2 SOURCES] Google plans to incorporate memory‑safe languages such as Rust into Chrome components. (8481a988-9f2c-469f-8b8f-998b87cee2d4,b8e80ae6-7139-4e24-887b-a3ab93428b7f)
- [● 3 SOURCES] AI agents are used across Chrome’s security lifecycle for vulnerability discovery, triage, patch generation and testing. (f9cfb3a6-af51-4420-bc57-fd6cd25dd866,1c6420a5-9506-402b-8e65-9b0821f5cc80,ad2f0948-882e-48d3-a153-61cb0d1cec23)
- [● 4 SOURCES] Chrome 151 stable release includes 370 security fixes. (Google)
- [● 3 SOURCES] Google will shift Chrome major releases to a two‑week cadence starting September 2026. (Google)
- [● 5 SOURCES] Google's Gemini AI discovered a sandbox‑escape vulnerability (CVE‑2026‑3545) that had existed for over 13 years. (Google)
- [● 6 SOURCES] Google is developing dynamic patching to apply Chrome updates without a full browser restart. (Google)