Skip to content
Google Increases Chrome Bug Bounty Rewards Amid AI-Driven Vulnerability Discovery

Google Increases Chrome Bug Bounty Rewards Amid AI-Driven Vulnerability Discovery

First seen 13 Oct 2026, 22:05 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 00:08 UTC
  • •Google has raised bug bounty rewards for Chrome vulnerabilities, focusing on memory safety.
  • •Base rewards for memory safety flaws increased to $2,000, still below pre-April levels.
  • •Google temporarily closed its Open Source Software Vulnerability Reward Program due to AI-generated reports.

On October 13, 2026, Google announced an increase in bug bounty rewards for certain Chrome vulnerabilities, particularly focusing on memory safety issues. This change comes after significant cuts to the bug bounty program in April 2026, where base rewards for some vulnerabilities were reduced by up to 90%. The new base reward for memory safety flaws has been raised from $500 to $2,000, though this is still below pre-April levels. Researchers can earn up to $20,000 for vulnerabilities in Chrome's browser, GPU, and network processes. The company is also reintroducing a $2,000 bonus for novel fuzzers. This adjustment follows a surge in AI-generated vulnerability reports, prompting Google to temporarily close its Open Source Software Vulnerability Reward Program for product submissions. The changes aim to encourage more actionable reports from security researchers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-01
Google cuts Chrome bug bounty rewards
Google significantly lowered standard payout amounts for Chrome vulnerabilities to focus on actionable reports, with some rewards reduced by up to 90%.
Securityweek
2026-10-04
CVE-2026-105134 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-04
CVE-2026-105133 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-05
CVE-2026-21589 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-08
CVE-2026-85097 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-08
CVE-2026-107406 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Google announces increased bug bounty rewards
Google raised base rewards for memory safety flaws to $2,000 and introduced new bonuses for fuzzers, responding to AI-driven vulnerability discovery.
Securityweek

More articles in this cluster (2)

Following this threat?

Track CVE-2026-102255 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (14)

1 / 3

Common questions

What are the new base rewards for Chrome vulnerabilities?
The new base reward for memory safety flaws is $2,000, with higher amounts for more severe vulnerabilities.
Why did Google cut bug bounty rewards earlier this year?
Google aimed to shift focus to actionable reports, resulting in significant reductions in standard payout amounts.
What prompted the temporary closure of the OSS VRP?
The closure was prompted by a growing number of AI-generated vulnerability reports.