Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Summary: Google fixed 1,072 security bugs in Chrome versions 149 and 150, more than the total across the prior 23 milestones combined, and resolved another 370 flaws in Chrome 151, seven of them critical. Google said a critical sandbox escape in the Navigation component (CVE-2026-3545, CVSS 9.6) that could let the browser read local files was found by an agent harness using its Gemini models after sitting undetected for more than 13 years.
What you should know: NVD has recorded 46,872 flaws so far in 2026, already nearing the 49,920 reported for all of 2025, and Google is piloting two security releases per week because fixes are being flagged faster than they can be shipped. A 13-year-old critical flaw that only an AI agent found is a fair estimate of what is still sitting in code your scanners have already cleared.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-3545
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026