Google fixed more Chrome bugs in June than in the past two years combined, citing AI tools

Google patched 1,072 security flaws in its Chrome browser across two versions released in June 2026, surpassing the total number of bugs fixed in the previous 23 versions over two years, which stood at 1,036. The company attributed the sharp increase to its internal AI tools, including large language models (LLMs) like Gemini, which are now being used to automate vulnerability discovery and patching at scale.

AI-driven vulnerability discovery reaches industrial scale

The data comes from a white paper published by Google detailing its use of AI to identify and fix security flaws faster. A chart in the report shows an exponential rise in bug fixes beginning with Chrome 126 in June 2024, culminating in the latest milestones, Chrome 149 and 150, both released in June 2026. Doug Turner, Chrome’s director of engineering, told Bitcoin World that LLMs have “fundamentally shifted the economics of cybersecurity, transforming vulnerability discovery into an automated, industrial-scale operation.” He added that by applying models like Gemini, Google is “preemptively fixing vulnerabilities, outpacing our adversaries and making Chrome safer with every update.”

Industry-wide trend mirrors Google’s results

Google is not alone in reporting a surge in patching activity. Earlier in June 2026, Microsoft announced it had fixed a record 570 security flaws across its product lines during its monthly Patch Tuesday release, also citing its own AI tools as a contributing factor. Apple, however, does not appear to be experiencing a similar jump. An independent count of bugs fixed in Apple products shows the company patched 482 vulnerabilities in 2026 as of June, roughly on pace with its 2025 total and similar to its 2015 numbers. Bitcoin World reached out to Apple for comment but did not receive a response.

What this means for Chrome users and the broader security landscape

The shift toward AI-powered vulnerability discovery represents a fundamental change in cybersecurity. Security experts have long warned that LLMs would enable attackers to find bugs exponentially faster, forcing defenders to adopt similar automation. Google’s data suggests that prediction is now being realized. For Chrome users, the practical impact is more frequent updates that address a larger number of vulnerabilities before they can be exploited. The company’s ability to patch over a thousand bugs in a single month indicates a new baseline for browser security maintenance, one that relies heavily on machine learning to keep pace with emerging threats.

Conclusion

Google’s announcement that it fixed more Chrome bugs in June 2026 than in the previous two years combined marks a clear inflection point in the use of AI for cybersecurity. The data, supported by similar trends at Microsoft, suggests that automated vulnerability discovery is becoming standard practice among major technology companies. While Apple has not yet reported a comparable increase, the broader industry appears to be entering a new phase where AI-driven patching cycles become the norm, raising the bar for both defenders and attackers.

FAQs

Q1: How many Chrome bugs did Google fix in June 2026?
Google fixed 1,072 security bugs across Chrome versions 149 and 150, both released in June 2026.

Q2: How does that compare to previous years?
It exceeds the 1,036 bugs fixed in the previous 23 versions over the prior two years, representing more than a doubling of the patching rate.

Q3: What AI tools is Google using?
Google is using its internal large language models, including Gemini, to automate vulnerability discovery and patching in Chrome.