MobbleOpen in Mobble ⇢
Technology · Cybersecurity · published 2026-10-14 · via Help Net Security

Google boosts Chrome bug bounty rewards and adds sandbox escape payouts

Image via Help Net Security
Image via Help Net Security

Google is updating Chrome's Vulnerability Rewards Program with higher payouts, including a fourfold increase to $2,000 for memory corruption bugs. Rewards can reach $20,000 for controlled memory writes from web content and for high-impact sandbox escapes, with additional amounts for renderer-process flaws and V8 issues. The program also reinstates a $2,000 fuzzer bonus and adds discretionary year-end awards, with new rules effective immediately.

Expanded Detail

Google's Chrome Vulnerability Rewards Program now pays more for memory corruption findings. The base amount rises to $2,000, while browser, network, and GPU flaws can earn up to $20,000 for controlled writes from web content. Renderer-process writes and use-after-free issues top out at $8,000; V8 sandbox problems receive $5,000, and V8 logic bugs $4,000.

Medium-severity non-memory-safety reports can receive $2,000 if they include or lead to a fix. High-impact sandbox escapes may pay up to $20,000. Google also restored a $2,000 fuzzer bonus and plans discretionary year-end awards. New rules apply immediately, including queued reports submitted after April 30, 2026.

Context

Chrome's revised payouts could encourage more security researchers to report memory-safety and sandbox flaws rather than sell or withhold them. That may help Google fix dangerous browser issues sooner, potentially reducing risks for many Chrome users and sites that depend on the browser. Smaller browser projects may face pressure to match such incentives, while attackers could still

Expanded detail and Context are AI-generated analysis; the linked article remains the authoritative source.
Read the full article at Help Net Security →
This summary is Al-enhanced to contain extended analysis and broader social context. The original is {NAME); the linked article is the authoritative source. Original headline: “Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes.” Browse more stories.