TECHNOLOGY
Google’s latest Chrome update resolves 52 vulnerabilities, highlighting a growing role for AI in security research.
Google on October 27 issued an update for its Chrome web browser, fixing 52 security vulnerabilities, four of which are classified as critical. The update applies to Chrome versions 156.0.8078.73/.74 for Windows and Mac, and 156.0.8078.73 for Linux.
The critical vulnerabilities include a memory corruption issue in FileSystem (CVE-2026-118306) and improper input validation errors in FileAPI (CVE-2026-118331) and Skia (CVE-2026-118348), along with a use-after-free vulnerability in Layout (CVE-2026-118344). All four were reported by researcher Xinyang Ge, with assistance from the AI model Claude developed by Anthropic.
According to Google, while it has not confirmed any exploitation of these vulnerabilities, it has adopted a policy of gradually restricting access to detailed bug information until a majority of users have patched their systems. This approach aims to reduce the risk of attacks during the update rollout period.
The integration of AI in security reporting is evident, with Ge’s reports accounting for a significant portion of the identified vulnerabilities, including those critical flaws. The cooperation between AI tools and human researchers continues to evolve, suggesting a shift in vulnerability discovery protocols.
Other contributors to the fixes included OpenAI’s Codex Security, which reported four vulnerabilities, while Google’s internal teams accounted for 19 of the reported issues. This trend reflects the increasing reliance on AI technologies within cybersecurity.
The Indian Computer Emergency Response Team (CERT-In) has issued a warning regarding these vulnerabilities, highlighting the potential for attackers to execute arbitrary code or access sensitive information. Users are advised to update their Chrome installations to the latest versions to ensure protection against these flaws. Chrome users can easily check for updates through the browser’s settings.
While the current update cycle has introduced numerous fixes, it raises questions about the future management of vulnerabilities, especially as AI tools become standard in the identification process. The implications of this shift for corporate patch management strategies remain to be seen.
Sources
Bhupendra Singh Chundawat is a seasoned technology journalist with over 22 years of experience in the media industry. He specializes in covering the global technology landscape, with a deep focus on manufacturing trends and the geopolitical impact on tech companies. Currently serving as the Editor at Readhis insights are shaped by decades of hands-on reporting and editorial leadership in the fast-evolving world of technology.