Google says AI found 1,072 Chrome bugs across two releases
AI helped Chrome fix 1,072 bugs in two releases, more than the previous 23 milestones combined, raising a harder question about speed versus security.
Google said AI helped Chrome fix 1,072 security bugs across Chrome 149 and Chrome 150, a total larger than the previous 23 Chrome milestones combined. The June patch wave showed how quickly machine-assisted vulnerability discovery is reshaping the browser’s security cycle, and how much more work can land on users and IT teams when fixes arrive at a faster clip.
The company described the June releases as evidence that it is now using AI heavily in vulnerability discovery, not just in product features. That shift matters because Chrome sits at the center of everyday computing, and a browser that finds bugs faster can also force a faster update rhythm across millions of devices. The question for security teams is no longer simply whether more flaws are being found, but whether the pace of patching is reducing real-world exposure or revealing how deep the backlog already was.
Google’s own security material points to a wider pressure campaign. On March 6, 2026, the Google Threat Intelligence Group published Look What You Made Us Patch: 2025 Zero-Days in Review, a review that underscored how its security teams had been dealing with a heavy flow of serious flaws and zero-days across Chrome and other products. That backdrop gives the June Chrome numbers more weight: the browser’s patch count did not arrive in a vacuum, but in a period when Google’s defenders were already absorbing a sustained stream of urgent vulnerabilities.
Google has also been preparing the public for a more AI-driven browser. In a September 18, 2025 post, Chrome: The browser you love, reimagined with AI, the company framed AI as part of Chrome’s next era under Parisa Tabriz, vice president of Chrome. The security side of that pitch is now impossible to ignore. If AI is finding bugs at scale, it may be making software safer faster. It may also be surfacing defects at machine speed, leaving the harder measure of success to how many attacks are actually prevented, not how many patches are shipped.
This article was produced by Prism’s automated news system from verified source data, official records, and press releases, then run through automated quality and moderation checks before publishing. The system is built and supervised by the people who set the standards it runs under. Read our full AI policy.
Did this article answer your question?
