Google stated that, leveraging internal AI tools, Chrome patched 1,072 security vulnerabilities in its two June releases, surpassing the 1,036 vulnerabilities patched in the previous two years' 23 releases combined. The company claims that this large-scale model is changing the pace of vulnerability discovery and patch releases.
Two versions released in June fixed 1072 vulnerabilities.
The data disclosed by Google comes from Chrome 149 and Chrome 150, both released in June. The company refers to each version as a "milestone." According to Google, the number of vulnerabilities fixed in the past month is already higher than the total number of vulnerabilities fixed in multiple versions over the past two years.
Google also released a trend chart and a white paper outlining its approach to using AI to discover vulnerabilities and accelerate fixes. The comparison shows that Chrome 126 was released in June 2024, while the 23 versions released between then and June of this year have cumulatively fixed 1036 vulnerabilities.
- Chrome versions 149 and 150: 1072 vulnerabilities fixed.
- Over the past two years, 23 versions have been released, fixing a total of 1036 vulnerabilities.
- Comparison with the starting version: Chrome 126
Google claims large models are changing the pace of security offense and defense.
Chrome Engineering Lead Doug Turner told TechCrunch that large models have fundamentally changed the cost structure of cybersecurity, making vulnerability discovery more automated and scalable.
He stated that Google is using models such as Gemini to discover and patch vulnerabilities in advance, hoping to address issues before attackers can exploit them, and to continuously improve Chrome's security through updates.
For the past few years, security researchers have been warning that AI systems could significantly increase the speed of vulnerability discovery, forcing defenders to rely on AI to keep up. The data disclosed by Google this time is seen as indicating that this shift is beginning to enter a more quantifiable phase.
Microsoft also saw similar growth.
Google isn't the only tech company experiencing this trend. Microsoft stated earlier this month that a record 570 security vulnerabilities were fixed across its product lines in a routine patch update. Microsoft also linked the increase in vulnerability fixes to its use of AI.
In contrast, Apple has not seen the same level of growth. According to independent statistics, Apple has fixed 482 vulnerabilities since 2026, a pace roughly similar to last year and close to the scale of its fixes in 2015. TechCrunch reports that Apple did not immediately respond to a request for comment.
