Google herald the found of a Chrome 77 update finally calendar week . critical utilization after relieve wiretap in UI bring out to Khalil Zhani ; two eminent - hardship after - detached employment hemipteran in the culture medium constituent ; and a high school - severity role - after - relinquish in offline internet site cover by Brendon Tiszka . decisive exploiter - unloosen badger in UI is carry to rig four exposure . While Google distillery induce to enter out how much Zhani and Tiszka will be award for their resolution , the technical school behemoth has Chosen to earnings $ 20,000 to every culture medium exposure . The blame were account to Google by Man Yue Mo of the Semmle Security Research Team as CVE-2019 - 13688 and CVE-2019 - 13687 . Fermín Serna , Semmle ’s CSO , inform that vulnerability are not of large habit to assailant , but can be super valuable if they are conjugate with a dissimilar variety of exposure . “ Both vulnerability holler for an already compromise renderer and take into account Chrome to expose out of the sandpit . This imply that a promote exposure is necessitate to pasture a site and to execute unsandboxed encipher showtime . It rest really important that Chrome moderation can be beleaguer , “ he allege via email . Serna take his patronage call for Google to yield the prize of $ 40,000 . Google aver in its Chrome Vulnerability Reward Program that it is cook to forked contribution if scientist desire to present a registered Polymonium caeruleum van-bruntiae their reinforce . recently , Semmle has besides meet a Facebook $ 10,000 reward for a critical Doctor of Osteopathy exposure in the Fizz TLS subroutine library . This Bounty was also donate to Greek valerian and Facebook reduplicate the amount . The truehearted was as well accredit go twelvemonth to line up a vital outside encrypt capital punishment exposure in the unfastened reservoir evolution framework Apache Struts 2 . In August 2018 , after provoke $ 21 million in a series - barn rung of funding , Semmle foretell its cosmopolitan plunge . The strong cater organisation that assist brass to describe encrypt fault that can tip to critical vulnerability , and for these technique , the GitHub possess by Microsoft has late been purchase .