Google Fixes Over 1,000 Chrome Vulnerabilities in One Month as AI Automation Escalates
Internal AI tools enabled Google to resolve more security vulnerabilities in two browser releases than in the previous two years combined.
Artificial intelligence has fundamentally altered software defense pipelines, delivering a massive spike in vulnerability discovery that cybersecurity experts long anticipated. Google revealed it addressed 1,072 security vulnerabilities across Chrome versions 149 and 150—both distributed within the past month—exceeding the total number of patches issued across the browser’s prior 23 versions combined.
Between June 2024 and mid-2026, spanning Chrome milestones 126 through 148, Google resolved 1,036 flaws. The sudden surge in fixes highlights how large language models are being operationalized to inspect complex code bases at scales impossible for human engineers alone. Detailed in a technical report published by Google’s security research team, internal models derived from Gemini now scan code to catch memory management flaws and logic errors before code reaches production environments.
Modern web browsers present a massive attack surface because their core components, such as rendering engines and JavaScript interpreters, are built in performance-oriented languages like C and C++. These environments are naturally susceptible to memory safety issues, including use-after-free bugs and buffer overflows, which comprise a significant portion of zero-day exploits targeted by threat actors.
Large language models have altered the economic dynamics of security engineering by turning vulnerability identification into an automated, industrial-scale system, according to Doug Turner, director of engineering for Chrome. Turner noted that deploying Gemini-based models allows defenders to systematically remediate flaws prior to exploitation, helping mitigate threat actors’ ability to discover unpatched vectors.
The trend is not isolated to web browsers. Major enterprise software providers are seeing similar surges as automated scanning tools mature. Microsoft recently disclosed a company record of 570 security patches during a single monthly Patch Tuesday release, attributing the volume to machine-learning security integrations. Conversely, independent tracking indicates Apple has maintained a linear patching trajectory, resolving 482 security flaws across its software ecosystem so far in 2026—a pace consistent with its annual totals from 2025 and historical baseline figures recorded a decade ago.









