A large Chrome security effort has fixed 347 vulnerabilities across the board, including 61 high-severity, 197 medium-severity, and 89 low-severity issues.

Disclosures show some flaws were discovered by Google, Xinyang Ge (Anthropic) with Claude assistance, or OpenAI Codex Security, though payouts were not issued for 285 of the vulnerabilities.

Quyen Son at VinFast received the top bounty of $10,000 for a high-severity use-after-free issue in Site Isolation.

Chrome 156 rolled out on multiple platforms, with versions 156.0.8078.47/48 for Windows and macOS and 156.0.8078.47 for Linux.

The Chrome 156 stable channel release patches 353 vulnerabilities across Windows, macOS, and Linux.

Bug bounty payments total at least $50,000 across 24 vulnerabilities, with totals potentially higher due to undisclosed amounts for 44 flaws.

Most fixes address memory safety, including 163 memory corruption bugs, 125 use-after-free issues, 17 out-of-bounds reads, and 36 flaws tied to improper input validations.

Six critical-severity vulnerabilities were resolved, five of which were memory corruption and one use-after-free.

There was no disclosed exploitation in the wild for these vulnerabilities.