Google has released a new version of its Chrome browser, fixing a number of high-risk security bugs and paying out $7,500 in bounties to researchers who reported bugs.
Google Chrome 7.0.517.44 also includes an updated version of Adobe’s Flash Player that fixes the bug that Adobe is patching today. The new version of Chrome includes patches for 10 security vulnerabilities that Google rated as high risks. Many of the bugs were reported to Google by outside researchers alone, but a few of them also were found by members of Google’s internal security team.
Google started a reward program for researchers who report bugs in Chromium earlier this year and has paid out tens of thousands of dollars in bounties since January. The company recently extended that reward program to vulnerabilities in Google’s Web properties, including its search engine, YouTube and other sites.
In this current Chrome release Google fixed 10 high-risk vulnerabilities, including two memory-corruption flaws, two use-after-free vulnerabilities and several other bugs. Nine of the vulnerabilities qualified for rewards, including six that got $1,000 payments. None of the bugs qualified for the highest reward of $3133.70.
The new versions of Chrome for Windows, Mac and Linux were released Thursday.