Chrome 152 patches 327 CVEs — 91.4% found by Google's internal bug hunting
xaitax · x · 2026-08-26
Researcher xaitax tallied the 327 CVEs fixed in Chrome 152.0.7977.64/.65 and found 299 (91.4%) were reported by Google internally, with external researchers contributing only 28 (8.6%) — 2 from XBOW and 1 from depthfirst.
He suggests Google is ramping up internal (possibly AI-assisted) bug hunting. The top external bounty was $25,000 for a use-after-free in ANGLE; most other Critical UAFs were found by Google itself.
More from Infra
- Tip: Offload Qwen 3.8 n-gram table to SSD to save RAM — Sadge404 · 2026-08-27
- The Guardian podcast: Everyone hates datacentres, but do we really need them? — nordicinst · 2026-08-27
- Analyze Nvidia Strategy: Buybacks vs. Heavy HBM Investment — toptickcrypto · 2026-08-27
- TokenSpeed adds Day-0 support for Qwen 3.8 Flash Next architecture — Alibaba_Qwen · 2026-08-27
- Z.ai serving 100T tokens/day on Chinese hardware implies training capability — SumitGup · 2026-08-27
- DLSS 4.5 Ray Reconstruction released with 2nd-gen joint denoiser — ctnzr · 2026-08-27