Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payouts and refining reward categories. The changes raise the base reward for memory corruption vulnerabilities and expand or adjust rewards for other types of security issues, fixes and research tools.
Multiple outlets report that Google is partially rolling back earlier reductions by shifting emphasis toward vulnerabilities that are both severe and difficult to uncover. Help Net Security says Google is also offering up to $20,000 specifically for sandbox escapes, with the company describing the program’s aim as improving internal testing by understanding which weaknesses matter most and are hardest to detect.
SecurityWeek characterizes the update as a partial reversal of Chrome bug bounty cuts, framing the restructuring around complex memory safety problems. Overall, the reports describe a continued effort to incentivize external researchers while aligning rewards more closely with the highest-risk browser flaws.
