Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace
Google this week confirmed that this year’s surge in Chrome vulnerabilities has been driven by the use of AI.
The increase in Chrome bugs started in April and has continued throughout July, with the latest browser release containing 370 security fixes and bringing the total number of bugs patched this year to over 1,800.
Google patched 1,072 security defects with the Chrome 149 and 150 releases, “surpassing the total number of security bugs fixed across the prior 23 milestones combined.”
This was the result of using an agent harness that leverages Gemini to identify security flaws across Chrome’s codebase with increased efficiency, the internet giant says.
What validated the AI-powered vulnerability detection, Google says, was the discovery of a sandbox escape that lurked in the browser for 13 years.
Tracked as CVE-2026-3545(CVSS score of 9.8) and patched in early May in Chrome 145, the issue could have allowed...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
