Software security vulnerabilities found in popular tech products in 2026 are
expected to be about twice the number found in 2025, a surge market participants
attribute mainly to advances in AI. The US National Vulnerability Database shows
45,207 vulnerabilities recorded from January through Monday, approaching 2025's
full-year total after 2025 set a record. Oracle (ORCL.N) said its July fixes
addressed 1,449 vulnerabilities versus 309 in the same month a year earlier;
Microsoft (MSFT.O) disclosed 642 in July, nearly five times the year-earlier
count; Google (GOOG.O) fixed 433 in a recent Chrome update versus 11 a year
earlier. SentinelOne research scientist Gabriel Shapiro said AI tools are
increasing the ability to find software bugs; Google Chrome engineering director
Doug Turner said vulnerabilities are now being found at "unprecedented scale and
speed" due to AI model progress and related investment.