- Google is quadrupling the base reward amount for reporting critical Chrome vulnerabilities.
- It is also introducing rewards of up to $20,000 for high-impact bugs.
- End-of-year awards will celebrate submissions from the community.
Google has relied on vulnerability reports from security researchers alongside its own internal security teams to keep apps like Chrome secure against exploits. The company has made several changes to its Vulnerability Rewards Program (VRP) over the last few months, including reducing Chrome reward payouts in May and using AI to improve Chrome security in July. Now, the company is making further adjustments to the Chrome VRP.
In a blog post, the company announces new reward amounts and categories. Google has quadrupled the base reward amount for memory corruption vulnerabilities to $2,000. Furthermore, reports for controlled reads and crashes in the browser, GPU, and network processes will now earn rewards of $4,000. Payouts for controlled writes, on the other hand, can go up to $20,000.