Other levels of compensation, without RCE, include demonstrating a controlled write or a memory corruption.

The baseline for bugs that do not demonstrate such “higher-quality reports” range from US$7,000 to US$25,000.

Last year, the total payouts in Google’s bug hunter program were US$10 million dollars, distributed among 632 people from 68 countries. Just over a third of the sum ($US3.4 million) concerned Android vulnerabilities. The second largest expenditure (US$2.1 million) concerned Chrome bugs.

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Was ist Social Engineering?

Social Engineering – Techniken Social Engineering hat sich für Cyberkriminelle als besonders erfolgreich erwiesen, wenn es darum geht in Unternehmen einzudringen. Sobald ein Angreifer das Passwort eines vertrauenswürdigen Mitarbeiters erbeutet

Read More

New MOVEit transfer vulnerabilities that require patching (2024)

EXECUTIVE SUMMARY: Remember last year’s MOVEit meltdown? Get ready for a reprise… For anyone who missed last year’s madness, MOVEit Transfer is a popular managed file transfer product sold by

Read More

Critical plugin flaw opens over a million WordPress sites to RCE attacks

RCE through Twig SSTI Twig server-side template injection (SSTI) is a type of security vulnerability that occurs when user input is improperly handled and directly inserted into a Twig template,

Read More