# Google Chrome AI-driven vulnerability research

> Developing situation record from CLSTR: https://clstr.news/situations/google-chrome-ai-driven-vulnerability-research
> Updated: 2026-10-14T10:30:00.000Z. Sources: 6. Developments: 2.

Google restructured its Chrome browser bug bounty program to address a surge in automated vulnerability reports generated by artificial intelligence. The company increased rewards for memory safety issues, raising the base reward for memory corruption from $500 to $2,000, while offering up to $20,000 for higher-tier vulnerabilities.

Following these policy adjustments, security researchers at XBOW utilized AI agents to discover and exploit a full-chain vulnerability in Google Chrome. The team used AI to analyze code and identify memory leaks, chaining three vulnerabilities to bypass the browser’s sandbox and achieve arbitrary code execution on Windows. The process took six days, a task XBOW estimated would typically require six to nine months of manual work by specialists. Google has since patched the vulnerabilities.

## Timeline

### 2026-10-14: Google pays $250,000 to XBOW for AI-driven Chrome exploit

XBOW researchers used AI agents to discover a complex Chrome security exploit in just six days, earning a $250,000 Google bounty for bypassing the browser's sandbox.

3 sources. https://clstr.news/cluster/google-pays-250000-to-xbow-for-ai-driven-chrome-exploit

### 2026-10-14: Google increases Chrome bug bounty rewards to combat AI-driven vulnerability reports

Google is increasing Chrome bug bounty rewards, raising base payouts for memory corruption vulnerabilities from $500 to $2,000 to combat AI-generated report surges and improve browser security.

3 sources. https://clstr.news/cluster/google-increases-chrome-bug-bounty-rewards-to-combat-ai-driven-vulnerability-reports

---
Cite as: Google Chrome AI-driven vulnerability research. CLSTR, https://clstr.news/situations/google-chrome-ai-driven-vulnerability-research