A security researcher has earned $250,000 from Google for reporting a critical Chrome vulnerability that allowed attackers to escape the browser’s sandbox.