PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Chrome VRP Reward Updates to Incentivize Deeper Research

bughunters.google.com | blog | #bug-bounty | #rce | #memory-corruption | #chrome | #google | #vrp | #reward-program
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Chrome VRP restructures rewards with tiered payouts for memory corruption bugs - baseline, high-quality report, controlled write, and demonstrated RCE - to incentivize deeper vulnerability research.
Published
Collected

Related coverage

research · bughunters.google.com
Changes to the Chrome VRP
Today we are announcing changes to the [Chrome Vulnerability Rewards Program](about/rules/chrome-friends/chrome-vulnerability-reward-program-rules), adjusting our reward amounts and program categories to reward deeper security research, recognize high-value fixes across more severity tiers, and provide new opportunities for researcher recognition.
blog · bughunters.google.com
Announcing Google’s New AI Vulnerability Reward Program!
Looking back at two years of AI bug bounties at Google, and announcing our new AI Vulnerability Reward Program!
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · bughunters.google.com
ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
Back