July 30, 2026, according to The Hacker News and Google’s official announcements, three recent major Chrome releases (Chrome 149, 150 and 151) together patched 1,442 security vulnerabilities. Among them, Chrome 149 and 150 fixed 1,072 vulnerabilities, exceeding the cumulative total fixed by the previous 23 milestone releases; the subsequently released Chrome 151 added fixes for another 370 vulnerabilities. This volume far outstrips past patterns and signals a new phase of browser security driven by AI-accelerated discovery.

Details: surge in vulnerability counts and AI discovery capability

Google noted on its official blog that the 1,072 security issues fixed in Chrome 149 and 150 exceed the cumulative number fixed by the prior 23 milestone releases. Chrome 151 then remediated an additional 370 vulnerabilities, 349 of which were reported internally by Google; seven were rated as Critical.

The surge is not accidental. Google says the exponential increase in discovery speed is largely attributable to the use of large language models (LLMs) and AI agents. The company built a Gemini-based agent harness that can efficiently scan the Chrome codebase and proactively surface potential security issues. A representative case is CVE-2026-3545: a sandbox escape in the Navigation component (CVSS score around 9.6–9.8) that had lingered in the code for more than 13 years and was ultimately found by a Gemini-driven agent and patched in early releases. That flaw could have allowed an attacker to trick the browser into reading local user files.

Meanwhile, global vulnerability counts are climbing rapidly. The U.S. National Vulnerability Database (NVD) shows about 46,872 recorded vulnerabilities so far in 2026, approaching 2025’s full-year total of 49,920, reflecting the industry-wide increase in discovery efficiency aided by AI.

Google’s response: accelerating release cadence

Facing the challenge that "vulnerabilities are being found faster than they can be fixed," Google is adjusting Chrome’s release strategy:

Transitioning major milestone releases toward a two-week cadence;
Maintaining weekly security updates;
Piloting a twice-weekly security release frequency to respond to "rapidly evolving AI-driven threats."

In addition, Google has integrated LLMs into its continuous integration (CI) systems&nb