The vulnerability rewards program for discovering issues in the Google Chrome browser was launched in 2010. To date, this program has received around 8,500 reports from users, and the total amount of rewards has exceeded $5 million.
It has now become known that Google has increased the bounty for discovering serious vulnerabilities in its own browser. The program includes versions of Chrome for current versions of software platforms such as Windows, macOS, Linux, Android, iOS, and Chrome OS.
The reward for discovering standard vulnerabilities can reach up to $15,000, whereas previously the maximum bounty was $5,000. A high-quality report related to cross-site scripting could earn up to $20,000. If a user provides information about a vulnerability that allows executing third-party code, the bounty can be as high as $30,000. Other vulnerabilities related to sandbox process memory anomalies, disclosure of confidential user information, privilege escalation, and others will be compensated depending on their significance, with rewards ranging from $500 to $20,000.
Google has also announced an increase in payouts within the Chrome Fuzzer Program, which allows research on a wide range of devices. Payouts under this program have increased to $1,000. It seems that Google is trying to incentivize researchers, which will help make Chrome more secure.
Source: 3dnews.ru
