--- title: Google fixed more Chrome security bugs in two releases... description: Google patched 1,072 security bugs in Chrome 149 and 150 — more than the previous 23 versions combined — crediting AI tooling for the dramatic increase. The... canonical: https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Google fixed more Chrome security bugs in two releases than the previous two years, crediting AI tools | daily.dev og:description: Google patched 1,072 security bugs in Chrome 149 and 150 — more than the previous 23 versions combined — crediting AI tooling for the dramatic increase. The... og:url: https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk og:image: https://api.daily.dev/og/posts/A6itDRKUk.png og:image:alt: Google fixed more Chrome security bugs in two releases than the previous two years, crediting AI tools og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Google fixed more Chrome security bugs in two releases than the previous two years, crediting AI tools **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Google patched 1,072 security bugs in Chrome 149 and 150 — more than the previous 23 versions combined — crediting AI tooling for the dramatic increase. The pipeline uses Gemini-powered agents for fuzzing and vulnerability analysis, plus Big Sleep (developed with DeepMind and Project Zero), which uncovered a 13-year-old sandbox escape bug. Automated triage is saving hundreds of developer hours monthly and blocked over 20 vulnerabilities from reaching production in May alone. Google is also accelerating delivery with two-week release cycles, weekly security updates, and dynamic patching without browser restarts. Microsoft reported a similar AI-driven surge in its July Patch Tuesday. The trend raises questions about whether attackers are using the same AI tools to find vulnerabilities before defenders do. ## Content Google patched 1,072 security bugs across Chrome 149 and 150, its two June releases. That's more than the 1,036 fixes across the previous 23 versions released over roughly two years. The company credits AI tooling for the jump. Chrome now uses large language models throughout the entire vulnerability lifecycle: finding bugs, triaging reports, rating severity, generating patches, and running tests. Two systems do most of the heavy lifting. The first is a Gemini-powered agent harness that automates triage and is reportedly saving hundreds of developer hours per month. The second is Big Sleep, built with DeepMind and Project Zero, which recently dug up a 13-year-old sandbox escape vulnerability. In May alone, the systems blocked more than 20 vulnerabilities from reaching production. Chrome's director of engineering said LLMs have "fundamentally shifted the economics of cybersecurity." That's a bold claim, but the numbers are hard to argue with. Microsoft reported something similar: a record 570 flaws patched in its July Patch Tuesday, also citing AI. Apple, by contrast, shows no comparable acceleration. There's a less comfortable side to this. As Chrome's Sarah Drasner noted when the accompanying research paper dropped, open source software is getting hammered by AI-assisted bug hunting — from security researchers, bounty hunters, and attackers alike. More bugs found faster is good. More attack surface being probed faster is the other side of that coin. Google is also trying to close the gap between when a fix is ready and when it actually reaches users. The plan includes moving to a two-week release cycle with weekly security updates, piloting twice-weekly security releases, and developing dynamic patching so Chrome can apply updates without a full browser restart. ## Questions this post answers ### How many security bugs did Chrome 149 and 150 fix compared to previous releases? Chrome 149 and 150, released in June, fixed 1,072 security bugs combined, more than the 1,036 fixes patched across the prior 23 versions released over roughly two years. Google attributes the jump to AI tooling used throughout the vulnerability lifecycle, including a Gemini-powered triage agent and the Big Sleep bug-hunting system built with DeepMind and Project Zero. _Teams tracking browser security posture can follow Chrome's patch cadence shifts on daily.dev._ ### What is Big Sleep and what vulnerability did it find in Chrome? Big Sleep is an AI-based vulnerability discovery system built by Google with DeepMind and Project Zero. It recently discovered a 13-year-old sandbox escape vulnerability in Chrome, and together with a Gemini-powered triage agent, it blocked more than 20 vulnerabilities from reaching production in May alone. _Engineers evaluating AI security tooling can keep up with results like Big Sleep's findings on daily.dev._ ### How is Google planning to speed up Chrome security update delivery? Google plans to move Chrome to a two-week release cycle with weekly security updates, is piloting twice-weekly security releases, and is developing dynamic patching so updates can apply without requiring a full browser restart. The goal is to close the gap between when a fix is ready and when it reaches users. _Developers planning around Chrome's release cadence can track these changes on daily.dev._ ## Similar posts on daily.dev - [An AI agent found 21 zero-days in FFmpeg for $1,000. Chrome just patched a record 429 bugs.](https://daily.dev/posts/an-ai-agent-found-21-zero-days-in-ffmpeg-for-1-000-chrome-just-patched-a-record-429-bugs--loichspdc) · The Next Web · 36 upvotes · 4 comments - [AI just found 10,000 bugs in a month. Finding them is the easy part](https://daily.dev/posts/ai-just-found-10-000-bugs-in-a-month-finding-them-is-the-easy-part-fjluqyxbl) · Swimm · 0 upvotes · 0 comments - [Firefox: The zero-days are numbered](https://daily.dev/posts/firefox-the-zero-days-are-numbered-swy2sidvw) · LWN.net · 1 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#google-chrome](https://daily.dev/tags/google-chrome), [#google-gemini](https://daily.dev/tags/google-gemini) [View this post on daily.dev](https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Google fixed more Chrome security bugs in two releases than the previous two years, crediting AI tools","url":"https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk"},"datePublished":"2026-07-30T21:07:47.353Z","dateModified":"2026-09-13T19:19:19.567Z","description":"Google patched 1,072 security bugs in Chrome 149 and 150 — more than the previous 23 versions combined — crediting AI tooling for the dramatic increase. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/735559f5de9089d15bb1bb5338510ac2?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/735559f5de9089d15bb1bb5338510ac2?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,google-chrome,google-gemini","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Google fixed more Chrome security bugs in two releases than the previous two years, crediting AI tools"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/google-fixed-more-chrome-security-bugs-in-two-releases-than-the-previous-two-years-crediting-ai-too-a6itdrkuk#faq","mainEntity":[{"@type":"Question","name":"How many security bugs did Chrome 149 and 150 fix compared to previous releases?","acceptedAnswer":{"@type":"Answer","text":"Chrome 149 and 150, released in June, fixed 1,072 security bugs combined, more than the 1,036 fixes patched across the prior 23 versions released over roughly two years. Google attributes the jump to AI tooling used throughout the vulnerability lifecycle, including a Gemini-powered triage agent and the Big Sleep bug-hunting system built with DeepMind and Project Zero. Teams tracking browser security posture can follow Chrome's patch cadence shifts on daily.dev."}},{"@type":"Question","name":"What is Big Sleep and what vulnerability did it find in Chrome?","acceptedAnswer":{"@type":"Answer","text":"Big Sleep is an AI-based vulnerability discovery system built by Google with DeepMind and Project Zero. It recently discovered a 13-year-old sandbox escape vulnerability in Chrome, and together with a Gemini-powered triage agent, it blocked more than 20 vulnerabilities from reaching production in May alone. Engineers evaluating AI security tooling can keep up with results like Big Sleep's findings on daily.dev."}},{"@type":"Question","name":"How is Google planning to speed up Chrome security update delivery?","acceptedAnswer":{"@type":"Answer","text":"Google plans to move Chrome to a two-week release cycle with weekly security updates, is piloting twice-weekly security releases, and is developing dynamic patching so updates can apply without requiring a full browser restart. The goal is to close the gap between when a fix is ready and when it reaches users. Developers planning around Chrome's release cadence can track these changes on daily.dev."}}]} ```