- Google has used Gemini powered AI to identify and fix 1,072 Chrome security vulnerabilities across the latest two release milestones.
- AI agents now automate bug triage, code reviews, patch creation, and cross platform testing to speed up Chrome development.
- Google is testing two security releases each week to reduce the time attackers have to exploit newly disclosed vulnerabilities.
- Dynamic patching and silent background updates aim to keep Chrome secure without forcing users to restart their browsers.
Google is taking a major step forward in browser security by bringing artificial intelligence into the heart of Chrome’s development process. The company says its AI powered systems are now helping security teams discover, review, and fix software vulnerabilities at a pace that would have been difficult through traditional methods alone. Alongside these improvements, Google is also introducing faster security updates and a new background patching system designed to protect users without interrupting their browsing experience.
The latest changes represent one of the biggest shifts in Chrome’s security strategy in years. While users may notice new interface improvements and performance upgrades in recent versions of Chrome, much of the work is happening behind the scenes where Google is focusing on making the browser more resilient against emerging threats.
AI is finding security flaws at an unprecedented speed
Google revealed that it has integrated Gemini powered AI models along with specialized security tools developed by DeepMind and Project Zero into Chrome’s security workflow. The results have been significant.
Across Chrome versions 149 and 150, the company fixed 1,072 security vulnerabilities. According to Google, this is more than the combined number of bugs resolved across the previous 23 Chrome release milestones. The dramatic increase highlights how AI is helping engineers identify problems that may have remained hidden for years.
One of the most notable discoveries was a high severity sandbox escape vulnerability that had existed in Chrome’s codebase for more than 13 years. Detecting such a long standing issue demonstrates how AI can complement human expertise by examining massive amounts of code with greater speed and consistency.
Rather than replacing security engineers, these AI systems act as assistants that help researchers uncover issues earlier and reduce the time required to investigate complex reports.
AI agents now handle much of the security workflow
The sharp rise in detected vulnerabilities also created a new challenge. Google needed a faster way to process and resolve the growing number of security reports. To address this, it introduced a multi agent workflow where different AI systems perform specialized tasks throughout the development cycle.
Fixing agents generate possible code changes to address identified vulnerabilities. Critic agents then review those proposed fixes to ensure they meet Chromium’s engineering standards and do not introduce new problems. Separate testing agents automatically create cross platform test cases that verify the effectiveness of each patch before it reaches users.
These AI powered systems are connected directly to Google’s continuous integration environment, allowing every code submission to be scanned regularly. The company says this automated process prevented more than 20 security vulnerabilities from reaching production during May alone, including at least one critical issue.
By reducing manual effort in repetitive tasks, engineers can spend more time investigating complex security problems while routine checks are completed much faster.
Faster updates aim to reduce the patch gap
Finding and fixing vulnerabilities is only part of the security challenge. Once Google publishes a fix in the open source Chromium project, attackers often analyze those code changes to identify the underlying vulnerability before every Chrome user has installed the update. This period is commonly known as the patch gap.
To reduce this window of risk, Google is testing a schedule that delivers two security releases every week instead of the traditional weekly update cycle. More frequent updates mean important fixes can reach users sooner, leaving attackers with less time to exploit known vulnerabilities.
However, quicker releases are only effective if users install them promptly. Many people delay restarting their browsers because they are working, watching videos, or have numerous tabs open. Those delays can leave systems exposed even after security patches become available.
Dynamic patching could transform browser security
Google is also working on a new technology called dynamic patching to solve the problem of delayed updates. Instead of requiring users to restart Chrome, the browser will be able to replace certain background processes while it continues running.
The approach takes advantage of Chrome’s multi process architecture by updating components such as the Renderer and GPU processes without interrupting active browsing sessions. This allows critical security fixes to be applied almost immediately while minimizing disruption for users.
On macOS, Google has already started using windowless background states that allow Chrome to perform silent automatic restarts when needed. The long term goal is to make browser security updates almost invisible, ensuring users remain protected without changing their daily workflow.
At the same time, Google continues its broader effort to improve memory safety across Chrome. While the company is strengthening existing C++ code, it is gradually increasing the use of Rust, a modern programming language designed to reduce memory related vulnerabilities that have historically contributed to many high severity browser attacks.
Together, AI driven vulnerability detection, automated testing, faster release cycles, dynamic patching, and memory safe development represent a comprehensive strategy to make Chrome more secure against modern cyber threats. As online attacks become increasingly sophisticated, Google appears determined to ensure that browser security evolves just as quickly.
Follow TechBSB For More Updates
