AI News Feed
Market watch
Cybersecurity

Google Raises Chrome Bug Bounties to as Much as $20,000

Google is raising Chrome bug bounty payouts, including up to $20,000 for high-impact bugs, Android Authority reports.

The new terms, announced in a blog post, include additional categories for Chrome reports. Android Authority reported that controlled reads and crashes in the browser, GPU, and network processes will earn $4,000. Payouts for controlled writes can reach $20,000. Google also plans end-of-year awards to recognize submissions from the community.

Google has used the Vulnerability Rewards Program alongside its internal security teams and reports from outside researchers to protect products such as Chrome from exploits. The Chrome program has been adjusted several times in recent months. In May, Google reduced Chrome reward payouts, and in July it used AI to improve Chrome security, according to Android Authority.

The latest update follows those earlier changes and sets new amounts and categories for Chrome-specific reports. The base reward for memory corruption vulnerabilities now stands at $2,000, four times the previous amount. Reports involving controlled reads and crashes in the browser, GPU, and network processes are set at $4,000. Controlled write reports can bring payouts as high as $20,000.

Google said end-of-year awards will celebrate submissions from the community. Android Authority reported the changes are part of further adjustments to the Chrome VRP.

Editor's Summary

Google raised Chrome bug bounty rewards, quadrupling the base payout for memory corruption vulnerabilities to $2,000 and offering up to $20,000 for high-impact bugs. The program will also pay $4,000 for controlled reads and crashes in the browser, GPU, and network processes, and it includes end-of-year community awards. The changes follow May payout reductions and July work to use AI for Chrome security.