Security Hall of Fame

The following bugs qualified for a Chromium Security Reward. On behalf of our millions of users, we thank the named researchers for helping make Chromium safer.

[NOTE - this list is occasionally missing a few items as it is not automatically synchronized to the bug database. Please e-mail security@chromium.org if your credit is missing and we will be delighted to correct it]

$1000 to Collin Payne for bug 150737
$1500 to Chamal de Silva for bug 171951
$60000 to Sergey Glazunov for bug 117226
$60000 to PinkiePie for bug 117620
$10000 to miaubiz for bug 116661
$10000 to Aki Helin from OUSPG for bug 116662
$10000 to Arthur Gerkis for bug 116663
$10000 to Sergey Glazunov for bug 143439
$4000 + $500 to Sergey Glazunov for bug 143437
$3133.7 to Sergey Glazunov for bug 68666
$3133.7 to Sergey Glazunov for bug 83275
$3133.7 to miaubiz for bug 88944
$3133.7 to Chamal de Silva for bug 107182
$3133.7 to Aki Helin from OUSPG for bug 108071
$3133.7 to Arthur Gerkis for bug 128178
$3133.7 to Arthur Gerkis for bug 135043
$3133.7 to miaubiz for bug 141901
$2000 + $500 to Sergey Glazunov for bug 98053
$2000 + $500 to Sergey Glazunov for bug 99512
$2000 + $500 to Sergey Glazunov for bug 99750
$2337 to Sergey Glazunov for bug 93906
$2337 to Sergey Glazunov for bug 96047
$2337 to Sergey Glazunov for bug 96885
$2000 to Sergey Glazunov for bug 93416
$2000 to Sergey Glazunov for bug 95671
$2000 to Daniel Divricean for bug 93416
$2000 to Sergey Glazunov for bug 117550
$2000 to Chamal de Silva for bug 139814
$1337 to Sergey Glazunov for bug 35724
$1337 to Sergey Glazunov for bug 45400
$1337 to Sergey Glazunov for bug 50553
$1337 to Keith Campbell for bug 51630
$1337 to Aki Helin from OUSPG for bug 59036
$1337 to Sergey Glazunov for bug 65764
$1337 to Sergey Glazunov for bug 70165
$1337 to Daniel Divricean for bug 69187
$1337 to Daniel Divricean for bug 70877
$1337 to Vincenzo Iozzo, Ralf Philipp Weinmann and Willem Pinckaers, through ZDI, for bug 75712
$1337 to kuzzcc for bug 77026
$1337 to Michael Braithwaite of Turbulenz Limited for bug 89836
$1337 to miaubiz for bug 100059
$1000 + $1000 to Sergey Glazunov for bug 73196
$1000 + $1000 to Sergey Glazunov for bug 73595
$1000 + $1000 to Sergey Glazunov for bug 74991
$1000 + $1000 to Sergey Glazunov for bug 77463
$1000 + $500 to Sergey Glazunov for bug 73746
$1000 + $500 to Sergey Glazunov for bug 74562
$1000 + $500 to Sergey Glazunov for bug 75170
$1000 + $500 to Sergey Glazunov for bug 79199
$1000 + $500 to Sergey Glazunov for bug 89520
$1000 + $500 to Sergey Glazunov for bug 90222
$1000 + $500 to Sergey Glazunov for bug 91598
$1000 + $500 to Sergey Glazunov for bug 97451
$1000 + $500 to Sergey Glazunov for bug 97520
$1000 + $500 to Sergey Glazunov for bug 97615
$1000 + $500 to Sergey Glazunov for bug 97784
$1000 + $500 to Sergey Glazunov for bug 98407
$1000 to Tokuji Akamine for bug 30660
$1000 to kuzzcc for bug 37383
$1000 to Jordi Chancel for bug 40445
$1000 to Sergey Glazunov for bug 39985
$1000 to Sergey Glazunov for bug 39047
$1000 to Aki Helin from OUSPG for bug 45983
$1000 to Mike Taylor for bug 49964
$1000 to Sergey Glazunov for bug 50515
$1000 to Sergey Glazunov for bug 51835
$1000 to kuzzcc for bug 51654
$1000 to kuzzcc for bug 51670
$1000 to Sergey Glazunov for bug 48437
$1000 to kuzzcc for bug 52204
$1000 to Sergey Glazunov for bug 50386
$1000 to Ashutosh Mehra and Vineet Batra of the Adobe Reader Sandbox Team for bug 52682
$1000 to kuzzcc for bug 50712
$1000 to Stefano Di Paola of MindedSecurity for bug 55350
$1000 to Aki Helin from OUSPG for bug 54691
$1000 to Aki Helin from OUSPG for bug 56760
$1000 to Aki Helin from OUSPG for bug 61338
$1000 to wushi of team509 for bug 55257
$1000 to kuzzcc for bug 58657
$1000 to Aki Helin from OUSPG for bug 59320
$1000 to Christoph Diehl for bug 60055
$1000 to wushi of team509 for bug 60688
$1000 to Aki Helin from OUSPG for bug 62623
$1000 to miaubiz for bug 62127
$1000 to Sławomir Błażek for bug 62401
$1000 to Chris Rohlf for bug 63866
$1000 to Sergey Glazunov for bug 64959
$1000 to Sławomir Błażek for bug 64945
$1000 to Sergey Glazunov for bug 66560
$1000 to Jared Allar of CERT for bug 67208
$1000 to Aki Helin from OUSPG for bug 67303
$1000 to kuzzcc for bug 67393
$1000 to David Warren of CERT for bug 68115
$1000 to Aki Helin from OUSPG for bug 68170
$1000 to Sergey Glazunov for bug 68178
$1000 to Sergey Glazunov for bug 68181
$1000 to Martin Barbella for bug 68439
$1000 to Sergey Glazunov for bug 68558
$1000 to Aki Helin from OUSPG for bug 63248
$1000 to Aki Helin from OUSPG for bug 55831
$1000 to Aki Helin from OUSPG for bug 64051
$1000 to Sergey Glazunov for bug 65577
$1000 to Sergey Glazunov for bug 68641
$1000 to miaubiz for bug 68120
$1000 to Martin Barbella for bug 69556
$1000 to David Warren of CERT for bug 70456
$1000 to Jordi Chancel for bug 54262
$1000 to Sergey Glazunov for bug 68263
$1000 to Sergey Glazunov for bug 68741
$1000 to Sławomir Błażek for bug 70244
$1000 to Martin Barbella for bug 71114
$1000 to Martin Barbella for bug 71115
$1000 to miaubiz for bug 71296
$1000 to wushi of team509 for bug 71386
$1000 to wushi of team509 for bug 71388
$1000 to Sergey Glazunov for bug 71595
$1000 to miaubiz for bug 71855
$1000 to Chamal de Silva for bug 72437
$1000 to Martin Barbella for bug 73235
$1000 to Martin Barbella for bug 70027
$1000 to Sergey Glazunov for bug 70442
$1000 to miaubiz for bug 71763
$1000 to Martin Barbella for bug 72028
$1000 to Sergey Glazunov for bug 73066
$1000 to miaubiz for bug 73134
$1000 to Sergey Glazunov for bug 74030
$1000 to Christian Holler for bug 74662
$1000 to Christian Holler for bug 74675
$1000 to Sławomir Błażek for bug 73216
$1000 to Christian Holler for bug 74660
$1000 to Christian Holler for bug 74665
$1000 to Christian Holler for bug 74666
$1000 to Christian Holler for bug 74669
$1000 to Christian Holler for bug 74671
$1000 to Christian Holler for bug 74672
$1000 to Christian Holler for bug 74673
$1000 to Christian Holler for bug 74678
$1000 to Christoph Diehl for bug 78524
$1000 to miaubiz for bug 73526
$1000 to kuzzcc for bug 74653
$1000 to Jose A. Vazquez for bug 75186
$1000 to Sergey Glazunov for bug 75801
$1000 to Martin Barbella for bug 76001
$1000 to kuzzcc for bug 76666
$1000 to kuzzcc for bug 77507
$1000 to kuzzcc for bug 78031
$1000 to miaubiz for bug 76966
$1000 to wushi of team509 for bug 77130
$1000 to Marek Majkowski for bug 77346
$1000 to miaubiz for bug 72340
$1000 to miaubiz for bug 78071
$1000 to Christian Holler for bug 78270
$1000 to Sławomir Błażek for bug 76059
$1000 to Martin Barbella for bug 72387
$1000 to miaubiz for bug 73962
$1000 to miaubiz for bug 79746
$1000 to miaubiz for bug 81949
$1000 to Vladislavas Jarmalis for bug 83010
$1000 to Sergey Glazunov for bug 83743
$1000 to Martin Barbella for bug 84452
$1000 to Martin Barbella for bug 82546
$1000 to Christian Holler for bug 84234
$1000 to Philippe Arteau for bug 77493
$1000 to miaubiz for bug 84355
$1000 to miaubiz for bug 85003
$1000 to miaubiz for bug 85211
$1000 to miaubiz for bug 85418
$1000 to Chamal de Silva for bug 88850
$1000 to the Microsoft Java Team and Microsoft Vulnerability Research (MSVR) for bug 88093
$1000 to miaubiz for bug 78841
$1000 to Martin Barbella for bug 78841
$1000 to miaubiz for bug 86502
$1000 to miaubiz for bug 87148
$1000 to miaubiz for bug 87227
$1000 to miaubiz for bug 87729
$1000 to miaubiz for bug 87925
$1000 to Christian Holler for bug 88591
$1000 to miaubiz for bug 88846
$1000 to Martin Barbella for bug 88889
$1000 to Vladimir Vorontsov, ONsec company for bug 72492
$1000 to miaubiz for bug 88216
$1000 to Sergey Glazunov for bug 87453
$1000 to miaubiz for bug 90668
$1000 to Aki Helin from OUSPG for bug 91665
$1000 to Arthur Gerkis for bug 89219
$1000 to miaubiz for bug 89330
$1000 to Sławomir Błażek for bug 92651
$1000 to Arthur Gerkis for bug 92959
$1000 to miaubiz for bug 93420
$1000 to miaubiz for bug 93587
$1000 to Christian Holler for bug 95920
$1000 to miaubiz for bug 93788
$1000 to miaubiz for bug 95072
$1000 to miaubiz for bug 95672
$1000 to Christian Holler for bug 98773
$1000 to Christian Holler for bug 99167
$1000 to miaubiz for bug 97599
$1000 to miaubiz for bug 98064
$1000 to miaubiz for bug 98556
$1000 to miaubiz for bug 99294
$1000 to miaubiz for bug 99880
$1000 to miaubiz for bug 96902
$1000 to miaubiz for bug 99138
$1000 x2 to miaubiz for bug 99211
$1000 to miaubiz for bug 100464
$1000 to Sławomir Błażek for bug 97092
$1000 to kuzzcc for bug 62925
$1000 to Aki Helin from OUSPG for bug 101458
$1000 to Christian Holler for bug 103259
$1000 to miaubiz for bug 103058
$1000 to miaubiz for bug 102810
$1000 to miaubiz for bug 102628
$1000 to Arthur Gerkis for bug 102359
$1000 to Arthur Gerkis for bug 103921
$1000 to Sławomir Błażek for bug 104011
$1000 to Sławomir Błażek for bug 104859
$1000 to Aki Helin from OUSPG for bug 104056
$1000 to Atte Kettunen of OUSPG for bug 103239
$1000 to Atte Kettunen of OUSPG for bug 104529
$1000 to Luka Treiber of ACROS Security for bug 99016
$1000 to Aki Helin from OUSPG for bug 106441
$1000 to Shawn Goertzen for bug 108871
$1000 to Aki Helin from OUSPG for bug 109716
$1000 to Arthur Gerkis for bug 109743
$1000 to Arthur Gerkis for bug 110112
$1000 to Arthur Gerkis for bug 110374
$1000 x2 to miaubiz for bug 105459
$1000 to Arthur Gerkis for bug 106484
$1000 to miaubiz for bug 108605
$1000 to Arthur Gerkis for bug 109556
$1000 to Boris Zbarsky of Mozilla for bug 106672
$1000 to miaubiz for bug 108695
$1000 to Aki Helin from OUSPG for bug 110172
$1000 to Arthur Gerkis for bug 111779
$1000 to miaubiz for bug 112847
$1000 to Chamal de Silva for bug 105867
$1000 to Arthur Gerkis for bug 111748
$1000 to Arthur Gerkis for bug 108037
$2000 to Arthur Gerkis for bug 112212
$1000 to Arthur Gerkis for bug 116093
$1000 to Aki Helin from OUSPG for bug 108406
$1000 to Aki Helin from OUSPG for bug 115471
$1000 to miaubiz for bug 113258
$1000 to miaubiz for bug 113439
$1000 to miaubiz for bug 114924
$1000 to miaubiz for bug 115028
$1000 to miaubiz for bug 113497
$1000 to miaubiz for bug 113707
$1000 to miaubiz for bug 114068
$1000 to miaubiz for bug 114219
$1000 to miaubiz for bug 115681
$1000 to miaubiz for bug 113902
$1000 to miaubiz for bug 116746
$1000 to Arthur Gerkis for bug 116461
$1000 to miaubiz for bug 104863
$1000 to miaubiz for bug 107758
$1000 to miaubiz for bug 108207
$1000 to Chamal de Silva for bug 108544
$1000 to miaubiz for bug 107244
$1000 to miaubiz for bug 110764
$1000 to miaubiz for bug 112151
$1000 to miaubiz for bug 112833
$1000 to Atte Kettunen of OUSPG for bug 111467
$1000 to Aki Helin from OUSPG for bug 112411
$1000 to Aki Helin from OUSPG for bug 114342
$1000 to Arthur Gerkis for bug 113837
$1000 to Atte Kettunen of OUSPG for bug 117471
$1000 to Omair for bug 117588
$1000 to Atte Kettunen of OUSPG for bug 135432
$1000 to Atte Kettunen of OUSPG for bug 140803
$1000 to Atte Kettunen of OUSPG for bug 143609
$1000 to miaubiz for bug 143656
$1000 to Sławomir Błażek for bug 144899
$1000 to miaubiz for bug 145544
$1000 to miaubiz for bug 134897
$1000 to Arthur Gerkis for bug 136235
$1000 to Jüri Aedla for bug 136894
$1000 to miaubiz for bug 129898
$1000 to miaubiz for bug 130595
$1000 to miaubiz for bug 120222
$1000 to miaubiz for bug 120944
$1000 to miaubiz for bug 124356
$1000 to miaubiz for bug 125374
$1000 to miaubiz for bug 129947
$1000 to miaubiz for bug 129951
$1000 to miaubiz for bug 130356
$1000 to Jüri Aedla for bug 132779
$509 to wushi of team509 for bug 34978
$500 to Isaac Dawson for bug 21338
$500 to Billy Rios for bug 26129
$500 to Timothy D. Morgan of VSR for bug 32718
$500 to Aki Helin from OUSPG for bug 35732
$500 to Aki Helin from OUSPG for bug 37061
$500 to kuzzcc for bug 39443
$500 to kuzzcc for bug 40635
$500 to wushi of team509 for bug 42294
$500 to wushi of team509 for bug 42723
$500 to Rodrigo Marcos of SECFORCE for bug 46126
$500 to wushi of team509 for bug 44424
$500 to wushi of team509 for bug 46360
$500 to Aki Helin from OUSPG for bug 48115
$500 to Michail Nikolaev for bug 42736
$500 to sp3x of SecurityReason.com for bug 43813
$500 to Jose A. Vazquez for bug 47866
$500 to Aki Helin from OUSPG for bug 48284
$500 to wushi of team509 for bug 49596
$500 to wushi of team509 for bug 49628
$500 to Aki Helin from OUSPG for bug 45331
$500 to kuzzcc for bug 51653
$500 to Isaac Dawson for bug 53001
$500 to David Weston of Microsoft Vulnerability Research (MSVR) for bug 50250
$500 to kuzzcc for bug 51252
$500 to kuzzcc for bug 51919
$500 to Sergey Glazunov for bug 53361
$500 to remy.saissy for bug 53361
$500 to kuzzcc for bug 53394
$500 to wushi of team509 for bug 55114
$500 to Aki Helin from OUSPG for bug 57501
$500 to kuzzcc for bug 51680
$500 to Simon Schaak for bug 54500
$500 to "vkouchna" for bug 58741
$500 to "gundlach" / various for bug 60238
$500 to "fam.lam" for bug 60327
$500 to Stefan Troger for bug 59554
$500 to kuzzcc for bug 63051
$500 to Sławomir Błażek for bug 62956
$500 to Chamal de Silva for bug 65299
$500 to Jan Tošovský for bug 66748
$500 to anonymous for bug 67363
$500 to Sergey Radchenko for bug 63732
$500 to Stefan van Zanden for bug 70078
$500 to Martin Barbella for bug 69628
$500 to Daniel Divricean for bug 70336
$500 to Alex Turpin for bug 72517
$500 to Christian Holler for bug 74670
$500 to Yuri Ko for bug 70070
$500 to Aki Helin for bug 71586
$500 to Michael Griffiths for bug 75347
$500 to Dan Rosenberg for bug 76542
$500 to Jordi Chancel for bug 77786
$500 to Collin Payne for bug 81916
$500 to Aki Helin from OUSPG for bug 85177
$500 to miaubiz for bug 85102
$500 to Mario Gomes for bug 85808
$500 to kuzzcc for bug 85808
$500 to miaubiz for bug 87298
$500 to Shih Wei-Long for bug 87339
$500 to Juho Nurminen for bug 88337
$500 to Aki Helin of OUSPG for bug 89142
$500 to Mario Gomes for bug 78639
$500 to Jordi Chancel for bug 89564
$500 to miaubiz for bug 89991
$500 to Christian Holler for bug 91120
$500 to Jordi Chancel for bug 86758
$500 to Simon Sarris for bug 91016
$500 to Aki Helin of OUSPG for bug 100465
$500 to Aki Helin of OUSPG for bug 98809
$500 to Atte Kettunen of OUSPG for bug 104959
$500 to Atte Kettunen of OUSPG for bug 105714
$500 to Aki Helin of OUSPG for bug 108416
$500 to Aki Helin of OUSPG for bug 108901
$500 to Aki Helin of OUSPG for bug 110277
$500 to miaubiz for bug 106336
$500 to pa_kt for bug 112259
$500 to Sławomir Błażek for bug 112670
$500 to Sławomir Błażek for bug 114054
$500 to miaubiz for bug 108467
$500 to Masato Kinugawa for bug 109574
$500 to Arthur Gerkis for bug 112317
$500 to miaubiz for bug 114056
$500 to Christian Holler for bug 117794
$500 to Nir Moshe for bug 137707
$500 to pawlkt for bug 139168
$500 to Atte Kettunen of OUSPG for bug 141651
$500 to miaubiz for bug 121347
$500 to miaubiz for bug 136881
$500 to Emmanuel Bronshtein for bug 142956
$500 to Takeshi Terada for bug 144813
$500 to Takeshi Terada for bug 144820
$500 to Takeshi Terada for bug 137532
$500 to Takeshi Terada for bug 144866
$500 to Takeshi Terada for bug 141889
$500 to Artem Chaykin for bug 138210
$500 to Artem Chaykin for bug 138035

The following special-case rewards were issued for bugs in components external to the Chromium project. We sometimes issue rewards for bugs in external components where information of the bug enabled us to proactively protect our users.

$5000 to Eetu Luodemaa and Joni Vähämäki, both from Documill, for bug 146254
$4000 to Jüri Aedla for bug 107128
$3000 to Jüri Aedla for bug 129930
$1337 to Marc Schoenefeld for bug 48283
$1337 to Simon Berry-Byrne for bug 48733
$1337 to Marc Schoenefeld for bug 51070
$1337 to Jüri Aedla for bug 112822
$1000 to Bui Quang Minh from Bkis (www.bkis.com) for bug 58731
$1000 to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences for bug 63444
$1000 to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences for bug 86900
$1000 to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences for bug 89402
$1000 to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences for bug 93472
$1000 to Nicolas Gregoire for bug 138673
$500 to Nicolas Gregoire for bug 127417

(Note that some of the above individuals elected to donate the rewards to charity. In these cases, Google often increased the value of the donation beyond the stated reward amount.)

Honorable mention

The following lower severity or duplicate bugs were responsibly reported to the Chromium project. Thanks to these named individuals for helping Chromium security!

Mike Dougherty of dotSyntax, LLC for bug 33572
kuzzcc for bug 37007
RSnake of ha.ckers.org for bug 33445
Tobias Klein (www.trapkit.de) for bug 38845
Carlos Ghan for bug 33952
WHK <elhacker.net> and The-0utl4w From Aria-Security for bug 34721
Aki Helin from OUSPG for bug 35979
Aki Helin from OUSPG for bug 36976
Jordi Chancel for bug 37447
kuzzcc for bug 39277
Florent, Skyrecon systems for bug 40801
kuzzcc for bug 41778
Aki Helin from OUSPG for bug 42538
kuzzcc for bug 40628
kuzzcc for bug 41447
Florian Rienhardt, BSI for bug 36553
Ben Davis and Emanuele Gentili for bug 38105
Sergey Glazunov for bug 42396
Jose A. Vazquez for bug 45164
Mats Ahlgren for bug 46575
Aki Helin from OUSPG for bug 47056
Lostmon for bug 28001
"ironfist99" for bug 34414
Chris Weber from Casaba Security for bug 37201
Brook Novak for bug 41654
Lostmon for bug 45876
Keith Campbell for bug 51846
VUPEN Vulnerability Research Team (VUPEN-SR-2010-249) for bug 52443
"magnusmorton" for bug 51709
kuzzcc for bug 53176
"adriennefelt" for bug 54006
Jordi Chancel for bug 51680
kuzzcc for bug 53002
Dan Rosenberg, Virtual Security Research for bug 54132
Nirankush Panchbhai and Microsoft Vulnerability Research (MSVR) for bug 55745
Cezary Tomczak for bug 58319
Mohammed Bouhlel for bug 61701
kuzzcc for bug 62168
David Weston of Microsoft Vulnerability Research (MSVR) for bug 60055
kuzzcc for bug 60761
Marius Wachtler for bug 62276
Chamal de Silva for bug 65299
Chamal de Silva for bug 66591
David Warren of CERT for bug 67303
miaubiz for bug 67363
Brian Kirchoff for bug 62791
Dan Morrison for bug 66931
Matthew Heidermann for bug 68244
Reddit for bug 69195
Rik Cabanier for bug 67234
miaubiz for bug 71717
Louis Lang for bug 49747
Aki Helin from OUSPG for bug 66962
David Weston of Microsoft and Microsoft Vulnerability Research (MSVR) for bug 71788
Martin Barbella for bug 61502
Chamal de Silva for bug 70538
Cole Snodgrass for bug 72523
miaubiz for bug 72910
wushi of team509 for bug 75801
wushi of team509 for bug 76646
kuzzcc for bug 77349
Sergey Glazunov for bug 75821
kuzzcc for bug 79266
kuzzcc for bug 79426
Sergey Glazunov for bug 83273
kuzzcc for bug 83841
kuzzcc for bug 84402
Olli Pettay of Mozilla for bug 84600
kuzzcc for bug 84805
Mikołaj Małecki for bug 85559
Collin Payne for bug 84933
miaubiz for bug 82552
wushi of team509 (reported through ZDI) for bug 88670
miaubiz for bug 88670
electronixtar for bug 51464
wbrana for bug 57908
kuzzcc for bug 78427
kuzzcc for bug 83031
Aaron Sigel of vtty.com for bug 80680
Mario Gomes for bug 85041
Arthur Gerkis for bug 89795
miaubiz for bug 90134
miaubiz for bug 94800
Bernhard 'Bruhns' Brehm of Recurity Labs for bug 93497
Aki Helin from OUSPG for bug 93596
Nishant Yadant of VMware and Craig Chamberlain for bug 95917
Chu for bug 101010
Aki Helin from OUSPG for bug 100863
Collin Payne for bug 92550
Devdatta Akhawe, UC Berkeley for bug 103630
Atte Kettunen from OUSPG for bug 109094
Code Audit Labs of VulnHunt.com for bug 109245
Sławomir Błażek for bug 109664
Ben Carrillo for bug 109717
chrometot for bug 112451
Michael Gundlach for bug 108648
Glenn Randers-Pehrson for bug 116162

Comments

The Chromium Projects

Quick links

Other sites