Google on Tuesday announced the release of Chrome 150 with patches for 382 vulnerabilities, the vast majority of which were discovered by the tech giant itself.
Of the 382 vulnerabilities, 358 were found by Google. The company has discovered and patched hundreds of Chrome flaws in recent months, a surge likely driven by AI. However, it has shared no details on which specific AI tools are driving the surge.
Fifteen of the newly patched vulnerabilities have been assigned a ‘critical’ severity rating, and 67 have been rated ‘high severity’. Of the remaining flaws, 169 have a ‘medium’ and 131 have a ‘low’ severity rating.
The security holes have been described as user-after-free, out-of-bounds, incorrect security UI, uninitialized use, type confusion, and insufficient input validation issues.
Many of the vulnerabilities affect the renderer process and can typically be triggered via crafted web content. These types of flaws could allow a remote attacker to achieve arbitrary code execution inside the renderer sandbox.
In some cases, they may also enable an attacker who has already compromised the renderer to escape the sandbox, potentially leading to arbitrary code execution on the system.
Google’s latest advisory does not mention in-the-wild exploitation for any of the flaws.
Earlier this month, the company patched the fifth actively exploited zero-day of 2026.
UPDATE: Google has updated its advisory to say that the Chrome update actually patches 433 vulnerabilities. The company has also updated the Chrome version number to 150; it was initially 151.
Related: Chrome 149 Update Resolves 18 Severe Vulnerabilities
Related: Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities
Related: Chrome 148 Update Patches 151 Vulnerabilities
Related: FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service
