Updates to the Windows Insider Preview Bounty Program

guest · Jul 27, 2020

Microsoft Adds Scenario-Based Rewards to Windows Insider Preview Bounty Program
July 27, 2020
https://www.securityweek.com/micros...ewards-windows-insider-preview-bounty-program

As part of the WIP program, eligible researchers are invited by Microsoft to find vulnerabilities in the Windows Insider Preview Dev Channel, with general rewards ranging between $500 for denial-of-service (DoS) issues and $5,000 for remote code execution flaws.

However, there are now five attack scenarios that can earn researchers between $20,000 and $100,000. The maximum bounty is awarded for demonstrating a remote attack where an unauthenticated attacker achieves non-sandboxed arbitrary code execution without any user interaction.
Click to expand...

Microsoft also announced that it has made some changes that should lead to faster assessments and bounty reviews.

“To enable faster triage and review of WIP bounty submissions and ultimately get awards to researchers faster, we ask that all Windows vulnerability reports indicate if the issue reproduces on WIP Dev Channel, and include the build and revision string in your report,” Jarek Stanley, senior program manager at MSRC, explained in a blog post.
Click to expand...

Microsoft (MSRC Team): Updates to the Windows Insider Preview Bounty Program

Log in or Sign up

Updates to the Windows Insider Preview Bounty Program

guest Guest

Log in or Sign up

Updates to the Windows Insider Preview Bounty Program

guest Guest

Useful Searches