Critical Chrome Vulnerability Earns Researcher $43,000

SecurityWeek reports that Google patched a critical use-after-free vulnerability in Chrome, which earned a researcher $43,000 in a bug bounty. The flaw, tracked as CVE-2025-10200 and described as a use-after-free issue in the browser’s ServiceWorker component, could potentially allow arbitrary code execution and system compromise.

According to Google, the update also fixes CVE-2025-10201, a high-severity inappropriate implementation in Mojo, for which a $30,000 reward was paid to Sahan Fernando and an anonymous researcher. The article notes that in the past Google has issued larger rewards, including a $250,000 bug bounty for a Chrome vulnerability capable of escaping the sandbox.

Google states that there is no indication these newly patched vulnerabilities have been exploited in the wild, and users are advised to update promptly; the rollout covers Windows, macOS, and Linux versions specified in the report.