Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Vulnerabilities

Chrome 152 Patches Over 300 Vulnerabilities

Most of the flaws were discovered by Google using AI, but researchers are still discovering high-value Chrome vulnerabilities.

Chrome security

Google on Tuesday announced the release of Chrome 152, with patches for more than 300 vulnerabilities, the majority of which were discovered internally using AI.

Ten vulnerabilities have been assigned a critical severity rating. Most are use-after-free issues in components such as Angle, Aura, Chromecast, Views, and SafeBrowsing. 

Sixty-one flaws have been rated as high severity, while the rest have medium or low severity. 

Of the 327 weaknesses patched by the latest Chrome updates, 299 were discovered internally by Google. The use of AI has led to a surge in the discovery of Chrome vulnerabilities this year. 

However, external researchers are still discovering and reporting high-value flaws in the web browser. A researcher named Goodluck has been awarded $25,000 for a critical vulnerability tracked as CVE-2026-79282.

Several others also received thousands of dollars in bug bounties for security holes patched with the latest Chrome update.

Advertisement. Scroll to continue reading.

Google’s advisory does not mention in-the-wild exploitation. 

The tech giant has patched well over 2,000 Chrome vulnerabilities to date this year.

Related: Chrome, Firefox Updates Patch Dozens of Vulnerabilities

Related: Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

Related: Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

Related: Google Patches 382 Chrome Vulnerabilities

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Quantum eMotion has named Wayne Teeple as CTO.

Guy Ellis has been appointed CEO of NCC Group.

Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.