Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Last year, Google paid $ 2.9 million for the Vulnerability Reward Program
  • Technology

Last year, Google paid $ 2.9 million for the Vulnerability Reward Program

Do Son February 8, 2018 1 minute read
Vulnerability Reward Program
Add Daily CyberSecurity as a preferred source on Google

Since its launch in November 2010, Google’s Vulnerability Reward Program has generated nearly $12 million in bonuses. In just past 2017, the company paid $2.9 million to 274 security experts, but in 2016 it paid more than $3 million.

 

Vulnerability Reward Program undoubtedly can achieve a win-win situation for Google internal security test program is an excellent complement to; and for security experts, instead of using it as a malicious attack or sell to others, this approach can be avoided Follow-up security risks, but also to win the attention of companies such as Google and attention, perhaps to have better development.

Google said more than $ 1 million was reported and reported vulnerabilities in Google’s products and Android systems in 2017, while Chrome’s vulnerabilities were slightly less, but also allowed a total reward of $2.9 million.

Google said more than 50 of these security experts’ rewards totaled more than $125,000, and an additional $50,000 was awarded to users participating in the patch rewards program.

Related coverage

  • A New “Siri” Is Coming: Apple Considers Using Google Gemini to Power Its AI Overhaul
  • WannaCry-killer, Marcus Hutchins faces new charges
  • The Domino Effect: AWS Outage Caused by DNS Automation Race Condition
  • Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes
  • WWDC 2025: Apple to Revamp SwiftUI for Richer App Experiences
  • macOS 26 Tahoe Unveils Apple Sparse Image Format (ASIF): Boosting VM Performance
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Vulnerability Reward Program

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-77932CVSS 9.3
    DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77933CVSS 9.3
    DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and...
    📅 Updated: Oct 20, 2026
  • CVE-2026-113380CVSS 9.3
    In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere...
    📅 Updated: Oct 20, 2026
  • CVE-2026-113389CVSS 9.4
    A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table...
    📅 Updated: Oct 20, 2026
  • CVE-2026-113620CVSS 9.8
    In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do...
    📅 Updated: Oct 20, 2026
  • CVE-2026-67273CVSS 9.6
    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a...
    📅 Updated: Oct 20, 2026
  • CVE-2026-113391CVSS 9.4
    A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the...
    📅 Updated: Oct 20, 2026
  • CVE-2026-97468CVSS 9.1
    Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.