Chrome update costs Google almost $14,500

[ronjor]

Google's security update 8.0.552.237 for Chrome closes a total of 16 security holes. One of the vulnerabilities in the browser's speech handling has been rated critical by the developers, as it allows code to be executed outside of the protective sandbox. Developer Sergey Glazunov, who discovered the hole, was awarded $3,133.7 for his find. This is the first time that Google has paid such a high sum since the security reward programme was extended and the reward premiums were increased.

The H Security

[Night_Raven]

Well, considering Google can buy and sell numerous countries around the world, and that this is pocket change to them, I'm really not worried about their financial state anyway.

[vasa1]

They have a policy of not disclosing details of the vulnerability until "the majority" of their users are updated but I'd like to know about this one:

[$1000] [67393] Medium Uninitialized pointer in the browser triggered by rogue extension. Credit to kuzzcc.
http://googlechromereleases.blogspot...e-release.html

[JRViejo]

FYI. Google Chrome Portable 8.0.552.237 Stable and 10.0.634.0 Dev Released, courtesy of PortableApps.com.

[chronomatic]

Google's idea of exploit bounties is a good one. I applaud them for it. They should probably increase the price to encourage more auditing.