Google Partially Reverses Chrome Bug Bounty Cuts

What happened

At the time it announced a base reward of $500 for memory safety issues, with multipliers for reachability and the level of exploitability. Vulnerabilities in Chrome’s browser, GPU (a chip built for many calculations at once, used for graphics and AI) and network processes can now earn researchers up to $20,000.

Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek . Google is an Internet and software company based in Mountain View.

Vulnerabilities Google Partially Reverses Chrome Bug Bounty Cuts Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. AI has been changing the pace and profile of vulnerability discovery, and the tech giant has been adjusting its bug bounty programs in recent months.

Google significantly lowered standard payout amounts for some Chrome vulnerabilities in April to shift focus to actionable reports, with researchers noting that some rewards became 10 times smaller. The company is now quadrupling base rates for memory safety flaws, to $2,000. Despite the increase, the new rates remain well below those offered before the April overhaul.

Key facts

• At the time it — announced: a base reward of $500 for memory safety issues, with multipliers for reachability and the level of exploitability