Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes

October 12, 2026 · 8:47 pm 3 sources

Image: SecurityWeek

Coverage

Coverage

• Google Partially Reverses Chrome Bug Bounty Cuts
  SecurityWeek · October 13, 2026 17:00
  Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek .
• Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes
  Help Net Security · October 14, 2026 04:00
  Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payments for memory corruption vulnerabilities and expanding rewards for other security flaws, fixes and research tools. “A primary goal of the Chrome VRP has always been to identify ways to improve our internal…

More coverage

• Google paid $90,000 for this bug, then waited two months to fix it
  The New Stack · October 12, 2026 20:47
  Google took two months to patch an unauthenticated RCE vulnerability in its developer documentation infrastructure. The problem was a reused The post Google paid $90,000 for this bug, then waited two months to fix it appeared first on The New Stack .