Google Raises Chrome VRP Bounty: Memory Bugs Up to $20,000 Each

moyix · x · 2026-10-14

David Brumley (moyix) praises Google for again raising Chrome VRP per-bug rewards, arguing it reduces incentives to hoard vulnerabilities. The new table: memory safety bugs start at a $2,000 base with multipliers — a controlled write from web contents pays up to x10 ($20,000). An accompanying FAQ concedes exploit brokers may pay more but touts public credit, direct collaboration, and fast fixes.

Related event: Google raises Chrome bug bounties, sparking debate over AI bug hunting(3 posts)→

Original post →

More from Companies & People

Companies & People channel →