Chrome 152 patches 327 CVEs — 91.4% found by Google's internal bug hunting
xaitax · x · 2026-08-26
Researcher xaitax tallied the 327 CVEs fixed in Chrome 152.0.7977.64/.65 and found 299 (91.4%) were reported by Google internally, with external researchers contributing only 28 (8.6%) — 2 from XBOW and 1 from depthfirst.
He suggests Google is ramping up internal (possibly AI-assisted) bug hunting. The top external bounty was $25,000 for a use-after-free in ANGLE; most other Critical UAFs were found by Google itself.
More from Infra
- ASML CFO says US Match Act restricting DUV sales to China would backfire — pstAsiatech · 2026-10-15
- ASML sold out through 2028 but stock dips 2%; TL20 index up 57% YTD — TiernanRayTech · 2026-10-15
- Bloomberg breakdown: a 1GW Texas AI data center may need nearly $3B for overruns alone — rohanpaul_ai · 2026-10-15
- 7 System Design Algorithms to Know: Merkle Trees to CAP/PACELC — goyalshaliniuk · 2026-10-15
- MiniCPM-V 4.7 runs a 35B MoE multimodal model on phones with just 3GB memory — nevrekaraishwa2 · 2026-10-15
- Sipeed MaixStation product page goes live for edge AI dev — xlltt · 2026-10-15