Overview
- Chrome 151 is rolling out for Windows, macOS and Linux and contains fixes for 370 vulnerabilities, including seven critical flaws such as multiple use‑after‑free bugs in Compositing, Views, Skia and Ozone.
- Google says its teams found 349 of the newly fixed defects internally, credited 21 external reports and paid $58,500 in bug bounties for these disclosures.
- The Chrome security workflow now uses LLM‑powered multi‑agent agents that search code, automatically triage reports, generate candidate patches, run critic reviews and write cross‑platform tests before human review.
- To reduce the ‘patch gap’ attackers can exploit, Google is moving to faster delivery with a planned two‑week major release cadence, a pilot of extra weekly security updates and work on dynamic patching plus limited automatic restarts on macOS.
- Alongside automation, Google is investing in structural defenses such as expanding MiraclePtr, migrating new components to Rust and funding open‑source maintenance to remove whole classes of memory‑safety bugs.