Windows Bounty

<!DOCTYPE HTML> <html lang="en-US" dir="ltr"> <head>  <link rel="dns-prefetch" href="https://cdn-dynmedia-1.microsoft.com"/> <link rel="preconnect" href="https://cdn-dynmedia-1.microsoft.com"/> <link rel="dns-prefetch" href="https://web.vortex.data.microsoft.com"/> <link rel="preconnect" href="https://web.vortex.data.microsoft.com"/> <link rel="dns-prefetch" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/> <link rel="preconnect" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/> <link rel="dns-prefetch" href="https://c.s-microsoft.com"/> <link rel="preconnect" href="https://c.s-microsoft.com"/> <link rel="dns-prefetch" href="https://analytics.tiktok.com"/> <link rel="preconnect" href="https://analytics.tiktok.com"/> <link rel="dns-prefetch" href="https://bat.bing.com"/> <link rel="preconnect" href="https://bat.bing.com"/> <link rel="dns-prefetch" href="https://cdnssl.clicktale.net"/> <link rel="preconnect" href="https://cdnssl.clicktale.net"/> <link rel="dns-prefetch" href="https://d.impactradius-event.com"/> <link rel="preconnect" href="https://d.impactradius-event.com"/> <link rel="dns-prefetch" href="https://js.monitor.azure.com"/> <link rel="preconnect" href="https://js.monitor.azure.com"/> <link rel="dns-prefetch" href="https://mem.gfx.ms"/> <link rel="preconnect" href="https://mem.gfx.ms"/> <link rel="dns-prefetch" href="https://wcpstatic.microsoft.com"/> <link rel="preconnect" href="https://wcpstatic.microsoft.com"/> <link rel="dns-prefetch" href="https://www.clarity.ms"/> <link rel="preconnect" href="https://www.clarity.ms"/> <link rel="dns-prefetch" href="https://fpt.microsoft.com"/> <link rel="preconnect" href="https://fpt.microsoft.com"/> <link rel="dns-prefetch" href="https://publisher.liveperson.net"/> <link rel="preconnect" href="https://publisher.liveperson.net"/> <link rel="dns-prefetch" href="https://accdn.lpsnmedia.net"/> <link rel="preconnect" href="https://accdn.lpsnmedia.net"/> <link rel="dns-prefetch" href="https://lpcdn.lpsnmedia.net"/> <link rel="preconnect" href="https://lpcdn.lpsnmedia.net"/> <link rel="dns-prefetch" href="https://lptag.liveperson.net"/> <link rel="preconnect" href="https://lptag.liveperson.net"/> <meta charset="UTF-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <meta http-equiv="x-ua-compatible" content="ie=edge"/>  <link rel="SHORTCUT ICON" href="/favicon.ico?v2" type="image/x-icon"/> <meta name="robots" content="index, follow"/> <meta name="template" content="single-layout-template"/> <meta name="awa-canvasType" content="web"/> <meta name="awa-isTented" content="false"/> <meta name="awa-pageType"/> <meta name="awa-pgtmp" content="single-layout-template"/> <meta name="awa-pageId" content="c2f6871eee99d3b7ed4930cb666430f1"/> <meta name="awa-market" content="en-us"/> <meta name="awa-cms" content="AEM"/> <meta name="awa-enabledFeatures" content="contentbackfillgenerate;esiproductcards;feature-controlled-mwf;uhf-ms-io-endpoint;uhf-esi-cv;uhf-esi-cache;fraud-greenid;contentsquare;mediapixel;holiday-themer;lazyload-static-components;clientlibDefer;upsellEnabled;contentbackfillpkgdelete;healthcheck;contentbackfillhttpgenerate;perf-tracker-1ds;dynamic-bundle;cvIncrementer;tentingEnabled;chatCookiesImplemented;alertCountDownWithoutServerTime;pdpDynamicRendering;bundlesDynamicRendering;contentbackfillmetadatachangesvideo;contentbackfillmetadatachangesnonvideo;listDynamicRendering;experimentation-without-personalization;generic-list-importer;combinedUHF;cvCallEnabled;m365ProductCatalog;support-unsupported-locales;deferClickTale;videoLazyLoad;prefetchFontsEnabled;enable-code-isolation;imageLinkTag;fetchPriority;contentIngestionAgent;enableClickgroupTelemetry;imageLazyLoad;contentIngestionAgent-dispatcher2westus2Agent;isCacheControlFeatureEnabled;feature-controlled-content-card;lcpPrioritizationPhase1;ocReimagineTelemetry;deferScriptsEnabled;lcpPrioritizationPhase2;ocReimagineSlotNumberTelemetry;contentIngestionAgent-dispatcher1westus2Agent;ocReimagineComponentNameTelemetry;ocReimagineTemplateNameTelemetry;ptePhase1;extended-html-minification-sites;dynamicPrice;gl-auto-config;displayV35Toggle;chatCustomEndpoint;enableBoostPersonalization;ocReimagineTelemetryTemplateNameSwap;enableEmailConnector;enable-eventingService;ocReimagineAIAssistant;acsPMEFeatureEnabled;ocReimagineCustomerApiUrl;ocReimagineCustomerFilterApiUrl"/> <meta name='thirdparty-config' content='v1'/> <meta name="format-detection" content="telephone=no"/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Bold/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semilight/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2" as="font" type="font/woff2" crossorigin/> <title>Windows Bounty | MSRC</title> <link rel="canonical" href="https://www.microsoft.com/en-us/msrc/bounty-windows-insider-preview"/> <meta name="description" content="Critical and important vulnerabilities in Windows Insider Preview"/> <meta name="twitter:url" content="https://www.microsoft.com/en-us/msrc/bounty-windows-insider-preview"/> <meta name="twitter:title" content="Windows Bounty | MSRC"/> <meta name="twitter:description" content="Critical and important vulnerabilities in Windows Insider Preview"/> <meta name="twitter:card" content="summary"/> <meta property="og:url" content="https://www.microsoft.com/en-us/msrc/bounty-windows-insider-preview"/> <meta property="og:title" content="Windows Bounty | MSRC"/> <meta property="og:description" content="Critical and important vulnerabilities in Windows Insider Preview"/> <meta property="og:type" content="website"/> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css" type="text/css"> <link rel="stylesheet" href="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHf747282a2831677a6cb1c9ca4fe2b8fe.css" type="text/css"> <link rel="stylesheet" href="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css" type="text/css"> <script id="ie11-polyfill-script"> var isModernBrowser = ( 'fetch' in window && 'assign' in Object ); if ( !isModernBrowser ) { var scriptElement = document.createElement('script'); scriptElement.async = false; scriptElement.src = '/alfa/etc.clientlibs/cascade.component.authoring/clientlib-polyfills/resources/ie11-polyfills.js'; var polyfillScriptElement = document.querySelector('#ie11-polyfill-script'); if (polyfillScriptElement) { polyfillScriptElement.parentNode.insertBefore(scriptElement, polyfillScriptElement.nextSibling); } } </script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js"></script> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js"></script> <script type="text/javascript"> var expToken = { "exp": { "target": { "propertyToken": "8c1e142d-c7db-a269-dc00-3656897ea8b0", "visitorJsHash": "30368a72d017e4133bfd3b5d073d06ff", "expJsHash": "895e2a12062f1ee44d7d72d266904bde", "isExpWithoutPersonalizationEnabled": ("false"==="true") } } }; window.cas = expToken; </script> <meta name="cas-exp-visitor" content="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.min.ACSHASH30368a72d017e4133bfd3b5d073d06ff.js"> <meta name="cas-exp-at" content="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/experimentation.min.ACSHASH895e2a12062f1ee44d7d72d266904bde.js"> <script type="text/javascript" src="/alfa/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHbe3f2a9f6a41fc40556efe260fc861a5.js" async></script> <meta name="exp-visitor-anchor" content=""/> <meta name="exp-atjs-anchor" content=""/>  <script src="/alfa/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js"></script> </template></head> <body class="page basicpage"> <span style="display:none"> <script> window.mscv = 'CASMicrosoft0000.0' </script> <script> window.msservercv = 'CASMicrosoftCVa3a7acf5.0' </script> This is the Trace Id: d8bb8ad5f742c39b50d5df06d213bf23 <script> window.traceid = 'd8bb8ad5f742c39b50d5df06d213bf23' </script> </span> <script type="text/javascript"> window.msauthIsPublisher = true; </script> <span aria-hidden="true" class="d-none geo-info" data-continent="AS" data-country_code="SG" data-region_code="" data-city="SINGAPORE" data-timezone="GMT+8" data-zip="" data-county="" data-areacode=""> </span> <div id="page-top" tabindex="-1"></div> <div id="modalsRenderedAfterPageLoad"> </div> <div class="root responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="universalheader aem-GridColumn aem-GridColumn--default--12" data-component-id="cf9a86dceae618e01d6e6399d243873c"> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css" type="text/css">   <link rel="stylesheet" href="https://www.microsoft.com/onerfstatics/marketingsites-eas-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231" type="text/css" media="all" /> <div id="headerArea" class="uhf" data-m='{"cN":"headerArea","cT":"Area_coreuiArea","id":"a1Body","sN":1,"aN":"Body"}'> <div id="headerRegion" data-region-key="headerregion" data-m='{"cN":"headerRegion","cT":"Region_coreui-region","id":"r1a1","sN":1,"aN":"a1"}' > <div id="headerUniversalHeader" data-m='{"cN":"headerUniversalHeader","cT":"Module_coreui-universalheader","id":"m1r1a1","sN":1,"aN":"r1a1"}' data-module-id="Category|headerRegion|coreui-region|headerUniversalHeader|coreui-universalheader"> <div data-m='{"cN":"cookiebanner_cont","cT":"Container","id":"c1m1r1a1","sN":1,"aN":"m1r1a1"}'> <div id="uhfCookieAlert" data-locale="en-us"> <div id="msccBannerV2"></div> </div> </div> <a id="uhfSkipToMain" class="m-skip-to-main" href="javascript:void(0)" data-href="" tabindex="0" data-m='{"cN":"Skip to content_nonnav","id":"nn2m1r1a1","sN":2,"aN":"m1r1a1"}'>Skip to main content</a> <header class="c-uhfh context-uhf no-js c-sgl-stck c-category-header " itemscope="itemscope" data-header-footprint="/MSMSRC/MSMSRCHeader, fromService: True" data-magict="true" itemtype="http://schema.org/Organization"> <div class="theme-light js-global-head f-closed global-head-cont" data-m='{"cN":"Universal Header_cont","cT":"Container","id":"c3m1r1a1","sN":3,"aN":"m1r1a1"}'> <div class="c-uhfh-gcontainer-st"> <button type="button" class="c-action-trigger c-glyph glyph-global-nav-button" aria-label="All Microsoft expand to see list of Microsoft products and services" initialState-label="All Microsoft expand to see list of Microsoft products and services" toggleState-label="Close All Microsoft list" aria-expanded="false" data-m='{"cN":"Mobile menu button_nonnav","id":"nn1c3m1r1a1","sN":1,"aN":"c3m1r1a1"}'></button> <button type="button" class="c-action-trigger c-glyph glyph-arrow-htmllegacy c-close-search" aria-label="Close search" aria-expanded="false" data-m='{"cN":"Close Search_nonnav","id":"nn2c3m1r1a1","sN":2,"aN":"c3m1r1a1"}'></button> <a id="uhfLogo" class="c-logo c-sgl-stk-uhfLogo" itemprop="url" href="https://www.microsoft.com" aria-label="Microsoft" data-m='{"cN":"GlobalNav_Logo_cont","cT":"Container","id":"c3c3m1r1a1","sN":3,"aN":"c3m1r1a1"}'> <img alt="" itemprop="logo" class="c-image" src="https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31" role="presentation" aria-hidden="true" /> <span itemprop="name" role="presentation" aria-hidden="true">Microsoft</span> </a> <div class="f-mobile-title"> <button type="button" class="c-action-trigger c-glyph glyph-chevron-left" aria-label="See more menu options" data-m='{"cN":"Mobile back button_nonnav","id":"nn4c3m1r1a1","sN":4,"aN":"c3m1r1a1"}'></button> <span data-global-title="Microsoft home" class="js-mobile-title">MSRC</span> <button type="button" class="c-action-trigger c-glyph glyph-chevron-right" aria-label="See more menu options" data-m='{"cN":"Mobile forward button_nonnav","id":"nn5c3m1r1a1","sN":5,"aN":"c3m1r1a1"}'></button> </div> <div class="c-show-pipe x-hidden-vp-mobile-st"> <a id="uhfCatLogo" class="c-logo c-cat-logo" href="https://msrc.microsoft.com/" aria-label="MSRC" itemprop="url" data-m='{"cN":"CatNav_MSRC_nav","id":"n6c3m1r1a1","sN":6,"aN":"c3m1r1a1"}'> <span>MSRC</span> </a> </div> <div class="cat-logo-button-cont x-hidden"> <button type="button" id="uhfCatLogoButton" class="c-cat-logo-button x-hidden" aria-expanded="false" aria-label="MSRC" data-m='{"cN":"MSRC_nonnav","id":"nn7c3m1r1a1","sN":7,"aN":"c3m1r1a1"}'> MSRC </button> </div> <nav id="uhf-g-nav" aria-label="Contextual menu" class="c-uhfh-gnav" data-m='{"cN":"Category nav_cont","cT":"Container","id":"c8c3m1r1a1","sN":8,"aN":"c3m1r1a1"}'> <ul class="js-paddle-items"> <li class="single-link js-nav-menu x-hidden-none-mobile-vp uhf-menu-item"> <a class="c-uhf-nav-link" href="https://msrc.microsoft.com/" data-m='{"cN":"CatNav_Home_nav","id":"n1c8c3m1r1a1","sN":1,"aN":"c8c3m1r1a1"}' > Home </a> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="msmsrc-header-menulist-report-an-issue" aria-expanded="false" data-m='{"cN":"CatNav_msmsrc-header-menulist-report-an-issue_nonnav","id":"nn2c8c3m1r1a1","sN":2,"aN":"c8c3m1r1a1"}'>Report an issue</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"msmsrc-header-menulist-report-an-issue_cont","cT":"Container","id":"c3c8c3m1r1a1","sN":3,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-sbr_cont","cT":"Container","id":"c1c3c8c3m1r1a1","sN":1,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-sbr" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/vulnerability/new" data-m='{"cN":"CatNav_report-an-issue-submenuitem-sbr_nav","id":"n1c1c3c8c3m1r1a1","sN":1,"aN":"c1c3c8c3m1r1a1"}'>Report Security Vulnerability</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-cars_cont","cT":"Container","id":"c2c3c8c3m1r1a1","sN":2,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-cars" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/abuse" data-m='{"cN":"CatNav_report-an-issue-submenuitem-cars_nav","id":"n1c2c3c8c3m1r1a1","sN":1,"aN":"c2c3c8c3m1r1a1"}'>Report Abuse</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-infringement_cont","cT":"Container","id":"c3c3c8c3m1r1a1","sN":3,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-infringement" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/infringement" data-m='{"cN":"CatNav_report-an-issue-submenuitem-infringement_nav","id":"n1c3c3c8c3m1r1a1","sN":1,"aN":"c3c3c8c3m1r1a1"}'>Report Infringement</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"submission-faqs_cont","cT":"Container","id":"c4c3c8c3m1r1a1","sN":4,"aN":"c3c8c3m1r1a1"}'> <a id="submission-faqs" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/faqs-report-an-issue" data-m='{"cN":"CatNav_submission-faqs_nav","id":"n1c4c3c8c3m1r1a1","sN":1,"aN":"c4c3c8c3m1r1a1"}'>Submission FAQs</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_5" aria-expanded="false" data-m='{"cN":"CatNav_Customer guidance_nonnav","id":"nn4c8c3m1r1a1","sN":4,"aN":"c8c3m1r1a1"}'>Customer guidance</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Customer guidance_cont","cT":"Container","id":"c5c8c3m1r1a1","sN":5,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Security Update Guide_cont","cT":"Container","id":"c1c5c8c3m1r1a1","sN":1,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_6" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide" data-m='{"cN":"CatNav_Security Update Guide_nav","id":"n1c1c5c8c3m1r1a1","sN":1,"aN":"c1c5c8c3m1r1a1"}'>Security Update Guide</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Exploitability index_cont","cT":"Container","id":"c2c5c8c3m1r1a1","sN":2,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_7" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/exploitability-index" data-m='{"cN":"CatNav_Exploitability index_nav","id":"n1c2c5c8c3m1r1a1","sN":1,"aN":"c2c5c8c3m1r1a1"}'>Exploitability index</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Developer API documentation_cont","cT":"Container","id":"c3c5c8c3m1r1a1","sN":3,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_8" class="js-subm-uhf-nav-link" href="https://aka.ms/msrc-api-docs-cvrf" data-m='{"cN":"CatNav_Developer API documentation_nav","id":"n1c3c5c8c3m1r1a1","sN":1,"aN":"c3c5c8c3m1r1a1"}'>Developer API documentation</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Frequently Asked Questions_cont","cT":"Container","id":"c4c5c8c3m1r1a1","sN":4,"aN":"c5c8c3m1r1a1"}'> <a id="faqs-report-an-issue" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/msrc/faqs-security-update-guide" data-m='{"cN":"CatNav_Frequently Asked Questions_nav","id":"n1c4c5c8c3m1r1a1","sN":1,"aN":"c4c5c8c3m1r1a1"}'>Frequently Asked Questions</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Technical Security Notifications_cont","cT":"Container","id":"c5c5c8c3m1r1a1","sN":5,"aN":"c5c8c3m1r1a1"}'> <a id="Technical-Security-Notifications" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/technical-security-notifications" data-m='{"cN":"CatNav_Technical Security Notifications_nav","id":"n1c5c5c8c3m1r1a1","sN":1,"aN":"c5c5c8c3m1r1a1"}'>Technical Security Notifications</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_11" aria-expanded="false" data-m='{"cN":"CatNav_engage_nonnav","id":"nn6c8c3m1r1a1","sN":6,"aN":"c8c3m1r1a1"}'>Engage</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"engage_cont","cT":"Container","id":"c7c8c3m1r1a1","sN":7,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Bug Bounty Programs_cont","cT":"Container","id":"c1c7c8c3m1r1a1","sN":1,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_12" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/bounty" data-m='{"cN":"CatNav_Microsoft Bug Bounty Programs_nav","id":"n1c1c7c8c3m1r1a1","sN":1,"aN":"c1c7c8c3m1r1a1"}'>Microsoft Bug Bounty Programs</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Active Protections Program_cont","cT":"Container","id":"c2c7c8c3m1r1a1","sN":2,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_13" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/mapp" data-m='{"cN":"CatNav_Microsoft Active Protections Program_nav","id":"n1c2c7c8c3m1r1a1","sN":1,"aN":"c2c7c8c3m1r1a1"}'>Microsoft Active Protections Program</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"BlueHat Security Conference_cont","cT":"Container","id":"c3c7c8c3m1r1a1","sN":3,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_14" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/bluehat/" data-m='{"cN":"CatNav_BlueHat Security Conference_nav","id":"n1c3c7c8c3m1r1a1","sN":1,"aN":"c3c7c8c3m1r1a1"}'>BlueHat Security Conference</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Researcher Recognition Program_cont","cT":"Container","id":"c4c7c8c3m1r1a1","sN":4,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_15" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/researcher-recognition-program" data-m='{"cN":"CatNav_Researcher Recognition Program_nav","id":"n1c4c7c8c3m1r1a1","sN":1,"aN":"c4c7c8c3m1r1a1"}'>Researcher Recognition Program</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Windows Security Servicing Criteria_cont","cT":"Container","id":"c5c7c8c3m1r1a1","sN":5,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_16" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/windows-security-servicing-criteria" data-m='{"cN":"CatNav_Windows Security Servicing Criteria_nav","id":"n1c5c7c8c3m1r1a1","sN":1,"aN":"c5c7c8c3m1r1a1"}'>Windows Security Servicing Criteria</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Researcher Resource Center_cont","cT":"Container","id":"c6c7c8c3m1r1a1","sN":6,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_17" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/msrc-researcher-resource-center" data-m='{"cN":"CatNav_Researcher Resource Center_nav","id":"n1c6c7c8c3m1r1a1","sN":1,"aN":"c6c7c8c3m1r1a1"}'>Researcher Resource Center</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="who-we-are" aria-expanded="false" data-m='{"cN":"CatNav_who-we-are_nonnav","id":"nn8c8c3m1r1a1","sN":8,"aN":"c8c3m1r1a1"}'>Who we are</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"who-we-are_cont","cT":"Container","id":"c9c8c3m1r1a1","sN":9,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"mission_cont","cT":"Container","id":"c1c9c8c3m1r1a1","sN":1,"aN":"c9c8c3m1r1a1"}'> <a id="mission" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/mission" data-m='{"cN":"CatNav_mission_nav","id":"n1c1c9c8c3m1r1a1","sN":1,"aN":"c1c9c8c3m1r1a1"}'>Mission</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"cdoc_cont","cT":"Container","id":"c2c9c8c3m1r1a1","sN":2,"aN":"c9c8c3m1r1a1"}'> <a id="cdoc" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/cdoc" data-m='{"cN":"CatNav_cdoc_nav","id":"n1c2c9c8c3m1r1a1","sN":1,"aN":"c2c9c8c3m1r1a1"}'>Cyber Defense Operations Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"cvd_cont","cT":"Container","id":"c3c9c8c3m1r1a1","sN":3,"aN":"c9c8c3m1r1a1"}'> <a id="cvd" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/cvd" data-m='{"cN":"CatNav_cvd_nav","id":"n1c3c9c8c3m1r1a1","sN":1,"aN":"c3c9c8c3m1r1a1"}'>Coordinated Vulnerability Disclosure</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"social_cont","cT":"Container","id":"c4c9c8c3m1r1a1","sN":4,"aN":"c9c8c3m1r1a1"}'> <a id="social" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/social" data-m='{"cN":"CatNav_social_nav","id":"n1c4c9c8c3m1r1a1","sN":1,"aN":"c4c9c8c3m1r1a1"}'>Social</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_23" aria-expanded="false" data-m='{"cN":"CatNav_Blogs_nonnav","id":"nn10c8c3m1r1a1","sN":10,"aN":"c8c3m1r1a1"}'>Blogs</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Blogs_cont","cT":"Container","id":"c11c8c3m1r1a1","sN":11,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Security Response Center_cont","cT":"Container","id":"c1c11c8c3m1r1a1","sN":1,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_24" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-msrc" data-m='{"cN":"CatNav_Microsoft Security Response Center_nav","id":"n1c1c11c8c3m1r1a1","sN":1,"aN":"c1c11c8c3m1r1a1"}'>Microsoft Security Response Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Security Research \u0026 Defense_cont","cT":"Container","id":"c2c11c8c3m1r1a1","sN":2,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_25" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-srd" data-m='{"cN":"CatNav_Security Research \u0026 Defense_nav","id":"n1c2c11c8c3m1r1a1","sN":1,"aN":"c2c11c8c3m1r1a1"}'>Security Research & Defense</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"BlueHat Conference Blog_cont","cT":"Container","id":"c3c11c8c3m1r1a1","sN":3,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_26" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-bluehat" data-m='{"cN":"CatNav_BlueHat Conference Blog_nav","id":"n1c3c11c8c3m1r1a1","sN":1,"aN":"c3c11c8c3m1r1a1"}'>BlueHat Conference Blog</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="Acknowledgments" aria-expanded="false" data-m='{"cN":"CatNav_Acknowledgments_nonnav","id":"nn12c8c3m1r1a1","sN":12,"aN":"c8c3m1r1a1"}'>Acknowledgments</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Acknowledgments_cont","cT":"Container","id":"c13c8c3m1r1a1","sN":13,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Security Researcher Acknowledgments_cont","cT":"Container","id":"c1c13c8c3m1r1a1","sN":1,"aN":"c13c8c3m1r1a1"}'> <a id="security-researcher-acknowledgments" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide/acknowledgment" data-m='{"cN":"CatNav_Security Researcher Acknowledgments_nav","id":"n1c1c13c8c3m1r1a1","sN":1,"aN":"c1c13c8c3m1r1a1"}'>Security Researcher Acknowledgments</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Online Services Researcher Acknowledgments_cont","cT":"Container","id":"c2c13c8c3m1r1a1","sN":2,"aN":"c13c8c3m1r1a1"}'> <a id="online-services-acknowledgments" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide/acknowledgement/online" data-m='{"cN":"CatNav_Online Services Researcher Acknowledgments_nav","id":"n1c2c13c8c3m1r1a1","sN":1,"aN":"c2c13c8c3m1r1a1"}'>Online Services Researcher Acknowledgments</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"leaderboard_cont","cT":"Container","id":"c3c13c8c3m1r1a1","sN":3,"aN":"c13c8c3m1r1a1"}'> <a id="c-shellmenu_30" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/leaderboard" data-m='{"cN":"CatNav_leaderboard_nav","id":"n1c3c13c8c3m1r1a1","sN":1,"aN":"c3c13c8c3m1r1a1"}'>Security Researcher Leaderboard</a> </li> </ul> </div> </li> <li id="overflow-menu" class="overflow-menu x-hidden uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button data-m='{"pid":"More","id":"nn14c8c3m1r1a1","sN":14,"aN":"c8c3m1r1a1"}' type="button" aria-label="More" aria-expanded="false">More</button> <ul id="overflow-menu-list" aria-hidden="true" class="overflow-menu-list"> </ul> </div> </li> </ul> </nav> <div class="c-uhfh-actions" data-m='{"cN":"Header actions_cont","cT":"Container","id":"c9c3m1r1a1","sN":9,"aN":"c3m1r1a1"}'> <div class="wf-menu"> <nav id="uhf-c-nav" aria-label="All Microsoft menu" data-m='{"cN":"GlobalNav_cont","cT":"Container","id":"c1c9c3m1r1a1","sN":1,"aN":"c9c3m1r1a1"}'> <ul class="js-paddle-items"> <li> <div class="c-uhf-menu js-nav-menu"> <button type="button" class="c-button-logo all-ms-nav" aria-expanded="false" data-m='{"cN":"GlobalNav_More_nonnav","id":"nn1c1c9c3m1r1a1","sN":1,"aN":"c1c9c3m1r1a1"}'> <span>All Microsoft</span></button> <ul class="f-multi-column f-multi-column-6" aria-hidden="true" data-m='{"cN":"More_cont","cT":"Container","id":"c2c1c9c3m1r1a1","sN":2,"aN":"c1c9c3m1r1a1"}'> <li class="c-w0-contr"> <h2 class="c-uhf-sronly">Global</h2> <ul class="c-w0"> <li class="js-nav-menu single-link" data-m='{"cN":"M365_cont","cT":"Container","id":"c1c2c1c9c3m1r1a1","sN":1,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_31" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/microsoft-365" data-m='{"cN":"W0Nav_M365_nav","id":"n1c1c2c1c9c3m1r1a1","sN":1,"aN":"c1c2c1c9c3m1r1a1"}'>Microsoft 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Teams_cont","cT":"Container","id":"c2c2c1c9c3m1r1a1","sN":2,"aN":"c2c1c9c3m1r1a1"}'> <a id="l0_Teams" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"W0Nav_Teams_nav","id":"n1c2c2c1c9c3m1r1a1","sN":1,"aN":"c2c2c1c9c3m1r1a1"}'>Teams</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Copilot_cont","cT":"Container","id":"c3c2c1c9c3m1r1a1","sN":3,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_33" class="js-subm-uhf-nav-link" href="https://copilot.microsoft.com/" data-m='{"cN":"W0Nav_Copilot_nav","id":"n1c3c2c1c9c3m1r1a1","sN":1,"aN":"c3c2c1c9c3m1r1a1"}'>Copilot</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Windows_cont","cT":"Container","id":"c4c2c1c9c3m1r1a1","sN":4,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_34" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/windows/" data-m='{"cN":"W0Nav_Windows_nav","id":"n1c4c2c1c9c3m1r1a1","sN":1,"aN":"c4c2c1c9c3m1r1a1"}'>Windows</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Surface_cont","cT":"Container","id":"c5c2c1c9c3m1r1a1","sN":5,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_35" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/surface" data-m='{"cN":"W0Nav_Surface_nav","id":"n1c5c2c1c9c3m1r1a1","sN":1,"aN":"c5c2c1c9c3m1r1a1"}'>Surface</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Xbox_cont","cT":"Container","id":"c6c2c1c9c3m1r1a1","sN":6,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_36" class="js-subm-uhf-nav-link" href="https://www.xbox.com/" data-m='{"cN":"W0Nav_Xbox_nav","id":"n1c6c2c1c9c3m1r1a1","sN":1,"aN":"c6c2c1c9c3m1r1a1"}'>Xbox</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Deals_cont","cT":"Container","id":"c7c2c1c9c3m1r1a1","sN":7,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_37" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/sale?icid=gm_nav_L0_salepage" data-m='{"cN":"W0Nav_Deals_nav","id":"n1c7c2c1c9c3m1r1a1","sN":1,"aN":"c7c2c1c9c3m1r1a1"}'>Deals</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Small Business_cont","cT":"Container","id":"c8c2c1c9c3m1r1a1","sN":8,"aN":"c2c1c9c3m1r1a1"}'> <a id="l0_SmallBusiness" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/business" data-m='{"cN":"W0Nav_Small Business_nav","id":"n1c8c2c1c9c3m1r1a1","sN":1,"aN":"c8c2c1c9c3m1r1a1"}'>Small Business</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Support_cont","cT":"Container","id":"c9c2c1c9c3m1r1a1","sN":9,"aN":"c2c1c9c3m1r1a1"}'> <a id="l1_support" class="js-subm-uhf-nav-link" href="https://support.microsoft.com/en-us" data-m='{"cN":"W0Nav_Support_nav","id":"n1c9c2c1c9c3m1r1a1","sN":1,"aN":"c9c2c1c9c3m1r1a1"}'>Support</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c10c2c1c9c3m1r1a1","sN":10,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_41-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c10c2c1c9c3m1r1a1","sN":1,"aN":"c10c2c1c9c3m1r1a1"}'>Software</span> <button id="uhf-navbtn-shellmenu_41-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c10c2c1c9c3m1r1a1","sN":2,"aN":"c10c2c1c9c3m1r1a1"}'>Software</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_41-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_WindowsApps_cont","cT":"Container","id":"c3c10c2c1c9c3m1r1a1","sN":3,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_42" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/apps/windows?icid=CNavAppsWindowsApps" data-m='{"cN":"GlobalNav_More_Software_WindowsApps_nav","id":"n1c3c10c2c1c9c3m1r1a1","sN":1,"aN":"c3c10c2c1c9c3m1r1a1"}'>Windows Apps</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_AI_cont","cT":"Container","id":"c4c10c2c1c9c3m1r1a1","sN":4,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_43" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/ai" data-m='{"cN":"GlobalNav_More_Software_AI_nav","id":"n1c4c10c2c1c9c3m1r1a1","sN":1,"aN":"c4c10c2c1c9c3m1r1a1"}'>AI</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Outlook_cont","cT":"Container","id":"c5c10c2c1c9c3m1r1a1","sN":5,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_44" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook" data-m='{"cN":"GlobalNav_More_Software_Outlook_nav","id":"n1c5c10c2c1c9c3m1r1a1","sN":1,"aN":"c5c10c2c1c9c3m1r1a1"}'>Outlook</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_OneDrive_cont","cT":"Container","id":"c6c10c2c1c9c3m1r1a1","sN":6,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_45" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/onedrive/online-cloud-storage" data-m='{"cN":"GlobalNav_More_Software_OneDrive_nav","id":"n1c6c10c2c1c9c3m1r1a1","sN":1,"aN":"c6c10c2c1c9c3m1r1a1"}'>OneDrive</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Microsoft Teams_cont","cT":"Container","id":"c7c10c2c1c9c3m1r1a1","sN":7,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_46" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"GlobalNav_More_Software_Microsoft Teams_nav","id":"n1c7c10c2c1c9c3m1r1a1","sN":1,"aN":"c7c10c2c1c9c3m1r1a1"}'>Microsoft Teams</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_OneNote_cont","cT":"Container","id":"c8c10c2c1c9c3m1r1a1","sN":8,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_47" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/onenote/digital-note-taking-app" data-m='{"cN":"GlobalNav_More_Software_OneNote_nav","id":"n1c8c10c2c1c9c3m1r1a1","sN":1,"aN":"c8c10c2c1c9c3m1r1a1"}'>OneNote</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Edge_cont","cT":"Container","id":"c9c10c2c1c9c3m1r1a1","sN":9,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_48" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/edge" data-m='{"cN":"GlobalNav_More_Software_Edge_nav","id":"n1c9c10c2c1c9c3m1r1a1","sN":1,"aN":"c9c10c2c1c9c3m1r1a1"}'>Microsoft Edge</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Skype_cont","cT":"Container","id":"c10c10c2c1c9c3m1r1a1","sN":10,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_49" class="js-subm-uhf-nav-link" href="https://www.skype.com/en/" data-m='{"cN":"GlobalNav_More_Software_Skype_nav","id":"n1c10c10c2c1c9c3m1r1a1","sN":1,"aN":"c10c10c2c1c9c3m1r1a1"}'>Skype</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cN":"PCsAndDevices_cont","cT":"Container","id":"c11c2c1c9c3m1r1a1","sN":11,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_50-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"cN":"GlobalNav_PCsAndDevices_nonnav","id":"nn1c11c2c1c9c3m1r1a1","sN":1,"aN":"c11c2c1c9c3m1r1a1"}'>PCs & Devices </span> <button id="uhf-navbtn-shellmenu_50-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"cN":"GlobalNav_PCsAndDevices_nonnav","id":"nn2c11c2c1c9c3m1r1a1","sN":2,"aN":"c11c2c1c9c3m1r1a1"}'>PCs & Devices </button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_50-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_PCsAndTablets_cont","cT":"Container","id":"c3c11c2c1c9c3m1r1a1","sN":3,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_51" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/pc?icid=CNavDevicesPC" data-m='{"cN":"GlobalNav_More_PCsAndDevices_PCsAndTablets_nav","id":"n1c3c11c2c1c9c3m1r1a1","sN":1,"aN":"c3c11c2c1c9c3m1r1a1"}'>Computers</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_ShopXbox_cont","cT":"Container","id":"c4c11c2c1c9c3m1r1a1","sN":4,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_52" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/xbox?icid=CNavDevicesXbox" data-m='{"cN":"GlobalNav_More_PCsAndDevices_ShopXbox_nav","id":"n1c4c11c2c1c9c3m1r1a1","sN":1,"aN":"c4c11c2c1c9c3m1r1a1"}'>Shop Xbox</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_Accessories_cont","cT":"Container","id":"c5c11c2c1c9c3m1r1a1","sN":5,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_53" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/accessories?icid=CNavDevicesAccessories" data-m='{"cN":"GlobalNav_More_PCsAndDevices_Accessories_nav","id":"n1c5c11c2c1c9c3m1r1a1","sN":1,"aN":"c5c11c2c1c9c3m1r1a1"}'>Accessories</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_VMAndMixedReality_cont","cT":"Container","id":"c6c11c2c1c9c3m1r1a1","sN":6,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_54" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/virtualreality?icid=CNavVirtualReality" data-m='{"cN":"GlobalNav_More_PCsAndDevices_VMAndMixedReality_nav","id":"n1c6c11c2c1c9c3m1r1a1","sN":1,"aN":"c6c11c2c1c9c3m1r1a1"}'>VR & mixed reality</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevicesCertifiedRefurbished_cont","cT":"Container","id":"c7c11c2c1c9c3m1r1a1","sN":7,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_55" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/certified-refurbished-products" data-m='{"cN":"GlobalNav_More_PCsAndDevicesCertifiedRefurbished_nav","id":"n1c7c11c2c1c9c3m1r1a1","sN":1,"aN":"c7c11c2c1c9c3m1r1a1"}'>Certified Refurbished</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_Trade-in-for-cash_cont","cT":"Container","id":"c8c11c2c1c9c3m1r1a1","sN":8,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_56" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/microsoft-trade-in" data-m='{"cN":"GlobalNav_More_PCsAndDevices_Trade-in-for-cash_nav","id":"n1c8c11c2c1c9c3m1r1a1","sN":1,"aN":"c8c11c2c1c9c3m1r1a1"}'>Trade-in for cash</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c12c2c1c9c3m1r1a1","sN":12,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_57-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c12c2c1c9c3m1r1a1","sN":1,"aN":"c12c2c1c9c3m1r1a1"}'>Entertainment</span> <button id="uhf-navbtn-shellmenu_57-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c12c2c1c9c3m1r1a1","sN":2,"aN":"c12c2c1c9c3m1r1a1"}'>Entertainment</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_57-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_XboxGamePassUltimate_cont","cT":"Container","id":"c3c12c2c1c9c3m1r1a1","sN":3,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_58" class="js-subm-uhf-nav-link" href="https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePassUltimate" data-m='{"cN":"GlobalNav_More_Entertainment_XboxGamePassUltimate_nav","id":"n1c3c12c2c1c9c3m1r1a1","sN":1,"aN":"c3c12c2c1c9c3m1r1a1"}'>Xbox Game Pass Ultimate</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_PC_Game_Pass_cont","cT":"Container","id":"c4c12c2c1c9c3m1r1a1","sN":4,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_59" class="js-subm-uhf-nav-link" href="https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass" data-m='{"cN":"GlobalNav_More_Entertainment_PC_Game_Pass_nav","id":"n1c4c12c2c1c9c3m1r1a1","sN":1,"aN":"c4c12c2c1c9c3m1r1a1"}'>PC Game Pass</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_XboxGames_cont","cT":"Container","id":"c5c12c2c1c9c3m1r1a1","sN":5,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_60" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/xboxgames?icid=CNavGamesXboxGames" data-m='{"cN":"GlobalNav_More_Entertainment_XboxGames_nav","id":"n1c5c12c2c1c9c3m1r1a1","sN":1,"aN":"c5c12c2c1c9c3m1r1a1"}'>Xbox games</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_PCGames_cont","cT":"Container","id":"c6c12c2c1c9c3m1r1a1","sN":6,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_61" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/games/windows?icid=CNavGamesWindowsGames" data-m='{"cN":"GlobalNav_More_Entertainment_PCGames_nav","id":"n1c6c12c2c1c9c3m1r1a1","sN":1,"aN":"c6c12c2c1c9c3m1r1a1"}'>PC and Windows games</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_MoviesAndTV_cont","cT":"Container","id":"c7c12c2c1c9c3m1r1a1","sN":7,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_62" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/movies-and-tv?icid=TopNavMoviesTv" data-m='{"cN":"GlobalNav_More_Entertainment_MoviesAndTV_nav","id":"n1c7c12c2c1c9c3m1r1a1","sN":1,"aN":"c7c12c2c1c9c3m1r1a1"}'>Movies & TV</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c13c2c1c9c3m1r1a1","sN":13,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_63-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c13c2c1c9c3m1r1a1","sN":1,"aN":"c13c2c1c9c3m1r1a1"}'>Business</span> <button id="uhf-navbtn-shellmenu_63-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c13c2c1c9c3m1r1a1","sN":2,"aN":"c13c2c1c9c3m1r1a1"}'>Business</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_63-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft_Cloud_cont","cT":"Container","id":"c3c13c2c1c9c3m1r1a1","sN":3,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_64" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-cloud" data-m='{"cN":"GlobalNav_More_Business_Microsoft_Cloud_nav","id":"n1c3c13c2c1c9c3m1r1a1","sN":1,"aN":"c3c13c2c1c9c3m1r1a1"}'>Microsoft Cloud</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft Security_cont","cT":"Container","id":"c4c13c2c1c9c3m1r1a1","sN":4,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_65" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/security" data-m='{"cN":"GlobalNav_More_Business_Microsoft Security_nav","id":"n1c4c13c2c1c9c3m1r1a1","sN":1,"aN":"c4c13c2c1c9c3m1r1a1"}'>Microsoft Security</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftDynamics365_cont","cT":"Container","id":"c5c13c2c1c9c3m1r1a1","sN":5,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_66" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/dynamics-365" data-m='{"cN":"GlobalNav_More_Business_MicrosoftDynamics365_nav","id":"n1c5c13c2c1c9c3m1r1a1","sN":1,"aN":"c5c13c2c1c9c3m1r1a1"}'>Dynamics 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft365forbusiness_cont","cT":"Container","id":"c6c13c2c1c9c3m1r1a1","sN":6,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_67" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/business" data-m='{"cN":"GlobalNav_More_Business_Microsoft365forbusiness_nav","id":"n1c6c13c2c1c9c3m1r1a1","sN":1,"aN":"c6c13c2c1c9c3m1r1a1"}'>Microsoft 365 for business</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftPowerPlatform_cont","cT":"Container","id":"c7c13c2c1c9c3m1r1a1","sN":7,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_68" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/power-platform" data-m='{"cN":"GlobalNav_More_Business_MicrosoftPowerPlatform_nav","id":"n1c7c13c2c1c9c3m1r1a1","sN":1,"aN":"c7c13c2c1c9c3m1r1a1"}'>Microsoft Power Platform</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Windows365_cont","cT":"Container","id":"c8c13c2c1c9c3m1r1a1","sN":8,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_69" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/windows-365" data-m='{"cN":"GlobalNav_More_Business_Windows365_nav","id":"n1c8c13c2c1c9c3m1r1a1","sN":1,"aN":"c8c13c2c1c9c3m1r1a1"}'>Windows 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftIndustry_cont","cT":"Container","id":"c9c13c2c1c9c3m1r1a1","sN":9,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_70" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/industry" data-m='{"cN":"GlobalNav_More_Business_MicrosoftIndustry_nav","id":"n1c9c13c2c1c9c3m1r1a1","sN":1,"aN":"c9c13c2c1c9c3m1r1a1"}'>Microsoft Industry</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_SmallBusiness_cont","cT":"Container","id":"c10c13c2c1c9c3m1r1a1","sN":10,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_71" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/business?icid=CNavBusinessStore" data-m='{"cN":"GlobalNav_More_Business_SmallBusiness_nav","id":"n1c10c13c2c1c9c3m1r1a1","sN":1,"aN":"c10c13c2c1c9c3m1r1a1"}'>Small Business</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c14c2c1c9c3m1r1a1","sN":14,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_72-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c14c2c1c9c3m1r1a1","sN":1,"aN":"c14c2c1c9c3m1r1a1"}'>Developer & IT </span> <button id="uhf-navbtn-shellmenu_72-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c14c2c1c9c3m1r1a1","sN":2,"aN":"c14c2c1c9c3m1r1a1"}'>Developer & IT </button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_72-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_Azure_cont","cT":"Container","id":"c3c14c2c1c9c3m1r1a1","sN":3,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_73" class="js-subm-uhf-nav-link" href="https://azure.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_Azure_nav","id":"n1c3c14c2c1c9c3m1r1a1","sN":1,"aN":"c3c14c2c1c9c3m1r1a1"}'>Azure</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_DeveloperCenter_cont","cT":"Container","id":"c4c14c2c1c9c3m1r1a1","sN":4,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_74" class="js-subm-uhf-nav-link" href="https://developer.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_DeveloperCenter_nav","id":"n1c4c14c2c1c9c3m1r1a1","sN":1,"aN":"c4c14c2c1c9c3m1r1a1"}'>Developer Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_Documentation_cont","cT":"Container","id":"c5c14c2c1c9c3m1r1a1","sN":5,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_75" class="js-subm-uhf-nav-link" href="https://learn.microsoft.com/docs/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_Documentation_nav","id":"n1c5c14c2c1c9c3m1r1a1","sN":1,"aN":"c5c14c2c1c9c3m1r1a1"}'>Documentation</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_MicrosoftLearn_cont","cT":"Container","id":"c6c14c2c1c9c3m1r1a1","sN":6,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_76" class="js-subm-uhf-nav-link" href="https://learn.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_MicrosoftLearn_nav","id":"n1c6c14c2c1c9c3m1r1a1","sN":1,"aN":"c6c14c2c1c9c3m1r1a1"}'>Microsoft Learn</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_MicrosoftTechCommunity_cont","cT":"Container","id":"c7c14c2c1c9c3m1r1a1","sN":7,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_77" class="js-subm-uhf-nav-link" href="https://techcommunity.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_MicrosoftTechCommunity_nav","id":"n1c7c14c2c1c9c3m1r1a1","sN":1,"aN":"c7c14c2c1c9c3m1r1a1"}'>Microsoft Tech Community</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_AzureMarketplace_cont","cT":"Container","id":"c8c14c2c1c9c3m1r1a1","sN":8,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_78" class="js-subm-uhf-nav-link" href="https://azuremarketplace.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_AzureMarketplace_nav","id":"n1c8c14c2c1c9c3m1r1a1","sN":1,"aN":"c8c14c2c1c9c3m1r1a1"}'>Azure Marketplace</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_AppSource_cont","cT":"Container","id":"c9c14c2c1c9c3m1r1a1","sN":9,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_79" class="js-subm-uhf-nav-link" href="https://appsource.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_AppSource_nav","id":"n1c9c14c2c1c9c3m1r1a1","sN":1,"aN":"c9c14c2c1c9c3m1r1a1"}'>AppSource</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_VisualStudio_cont","cT":"Container","id":"c10c14c2c1c9c3m1r1a1","sN":10,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_80" class="js-subm-uhf-nav-link" href="https://visualstudio.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_VisualStudio_nav","id":"n1c10c14c2c1c9c3m1r1a1","sN":1,"aN":"c10c14c2c1c9c3m1r1a1"}'>Visual Studio</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c15c2c1c9c3m1r1a1","sN":15,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_81-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c15c2c1c9c3m1r1a1","sN":1,"aN":"c15c2c1c9c3m1r1a1"}'>Other</span> <button id="uhf-navbtn-shellmenu_81-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c15c2c1c9c3m1r1a1","sN":2,"aN":"c15c2c1c9c3m1r1a1"}'>Other</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_81-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Microsoft Rewards_cont","cT":"Container","id":"c3c15c2c1c9c3m1r1a1","sN":3,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_82" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/rewards" data-m='{"cN":"GlobalNav_More_Other_Microsoft Rewards_nav","id":"n1c3c15c2c1c9c3m1r1a1","sN":1,"aN":"c3c15c2c1c9c3m1r1a1"}'>Microsoft Rewards </a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_FreeDownloadsAndSecurity_cont","cT":"Container","id":"c4c15c2c1c9c3m1r1a1","sN":4,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_83" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/download" data-m='{"cN":"GlobalNav_More_Other_FreeDownloadsAndSecurity_nav","id":"n1c4c15c2c1c9c3m1r1a1","sN":1,"aN":"c4c15c2c1c9c3m1r1a1"}'>Free downloads & security</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Education_cont","cT":"Container","id":"c5c15c2c1c9c3m1r1a1","sN":5,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_84" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/education" data-m='{"cN":"GlobalNav_More_Other_Education_nav","id":"n1c5c15c2c1c9c3m1r1a1","sN":1,"aN":"c5c15c2c1c9c3m1r1a1"}'>Education</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_GiftCards_cont","cT":"Container","id":"c6c15c2c1c9c3m1r1a1","sN":6,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_85" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/gift-cards" data-m='{"cN":"GlobalNav_More_Other_GiftCards_nav","id":"n1c6c15c2c1c9c3m1r1a1","sN":1,"aN":"c6c15c2c1c9c3m1r1a1"}'>Gift cards</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Licensing_cont","cT":"Container","id":"c7c15c2c1c9c3m1r1a1","sN":7,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="Licensing" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/licensing/" data-m='{"cN":"GlobalNav_More_Other_Licensing_nav","id":"n1c7c15c2c1c9c3m1r1a1","sN":1,"aN":"c7c15c2c1c9c3m1r1a1"}'>Licensing</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Unlocked_stories_cont","cT":"Container","id":"c8c15c2c1c9c3m1r1a1","sN":8,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_87" class="js-subm-uhf-nav-link" href="https://unlocked.microsoft.com/" data-m='{"cN":"GlobalNav_More_Other_Unlocked_stories_nav","id":"n1c8c15c2c1c9c3m1r1a1","sN":1,"aN":"c8c15c2c1c9c3m1r1a1"}'>Unlocked stories</a> </li> </ul> </li> <li class="f-multi-column-info"> <a data-m='{"id":"n16c2c1c9c3m1r1a1","sN":16,"aN":"c2c1c9c3m1r1a1"}' href="https://www.microsoft.com/en-us/sitemap" aria-label="" class="c-glyph">View Sitemap</a> </li> </ul> </div> </li> </ul> </nav> </div> <form class="c-search" autocomplete="off" id="searchForm" name="searchForm" role="search" action="https://www.microsoft.com/en-us/search/explore" method="GET" data-seAutoSuggest='{"queryParams":{"market":"en-us","clientId":"7F27B536-CF6B-4C65-8638-A0F8CBDFCA65","sources":"Iris-Products,DCatAll-Products,Microsoft-Terms","filter":"+ClientType:StoreWeb","counts":"1,5,5"},"familyNames":{"Apps":"App","Books":"Book","Bundles":"Bundle","Devices":"Device","Fees":"Fee","Games":"Game","MusicAlbums":"Album","MusicTracks":"Song","MusicVideos":"Video","MusicArtists":"Artist","OperatingSystem":"Operating System","Software":"Software","Movies":"Movie","TV":"TV","CSV":"Gift Card","VideoActor":"Actor"}}' data-seautosuggestapi="https://www.microsoft.com/msstoreapiprod/api/autosuggest" data-m='{"cN":"GlobalNav_Search_cont","cT":"Container","id":"c3c1c9c3m1r1a1","sN":3,"aN":"c1c9c3m1r1a1"}' aria-expanded="false"> <input id="cli_shellHeaderSearchInput" aria-label="Search Expanded" aria-autocomplete="list" aria-expanded="false" aria-controls="universal-header-search-auto-suggest-transparent" aria-owns="universal-header-search-auto-suggest-ul" type="search" name="q" role="combobox" placeholder="Search Microsoft.com" data-m='{"cN":"SearchBox_nav","id":"n1c3c1c9c3m1r1a1","sN":1,"aN":"c3c1c9c3m1r1a1"}' data-toggle="tooltip" data-placement="right" title="Search Microsoft.com" /> <button id="search" aria-label="Search Microsoft.com" class="c-glyph" data-m='{"cN":"Search_nav","id":"n2c3c1c9c3m1r1a1","sN":2,"aN":"c3c1c9c3m1r1a1"}' data-bi-mto="true" aria-expanded="false" disabled="disabled"> <span role="presentation">Search</span> <span role="tooltip" class="c-uhf-tooltip c-uhf-search-tooltip">Search Microsoft.com</span> </button> <div class="m-auto-suggest" id="universal-header-search-auto-suggest-transparent" role="group"> <ul class="c-menu" id="universal-header-search-auto-suggest-ul" aria-label="Search Suggestions" aria-hidden="true" data-bi-dnt="true" data-bi-mto="true" data-js-auto-suggest-position="default" role="listbox" data-tel="jsll" data-m='{"cN":"search suggestions_cont","cT":"Container","id":"c3c3c1c9c3m1r1a1","sN":3,"aN":"c3c1c9c3m1r1a1"}'></ul> <ul class="c-menu f-auto-suggest-no-results" aria-hidden="true" data-js-auto-suggest-postion="default" data-js-auto-suggest-position="default" role="listbox"> <li class="c-menu-item"> <span tabindex="-1">No results</span></li> </ul> </div> </form> <button data-m='{"cN":"cancel-search","pid":"Cancel Search","id":"nn4c1c9c3m1r1a1","sN":4,"aN":"c1c9c3m1r1a1"}' id="cancel-search" class="cancel-search" aria-label="Cancel Search"> <span>Cancel</span> </button> </div> </div> </div> </header> </div> </div> </div> <div class='meControl-configInfo' data-isenabled='true' data-convergedstack='true' data-baseurl='/cascadeauth/account' data-appid='10fa57ef-4895-4ab2-872c-8c3613d4f7fb' data-appcallbackurl='https://www.microsoft.com/cascadeauth/account/signin-oidc' data-accountconstraint='0' data-apigeneration='GEN1' data-silentauthrequirereload='false' data-silentauthaction='none'></div> <div class='userInfo-config' data-userInfoUrl='/cascadeauth/api/v1/account/userinfo' data-userInfoTimeoutMS='1000' data-retryDelayMS='2000' data-maxRetryAttempt='3'></div> <script src="/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js"></script> </div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="28134f1ee1370eee417bc52d1ed0a717"> <main class="microsoft-template-layout-container" tabindex="-1"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="layout-container responsivegrid mb-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uiddac6 heading-bg-color-layout-container-uiddac6" data-automation-test-id="layout-container-uiddac6"> <style data-automation-test-id="headingColor-layout-container-uiddac6"> .heading-bg-color-layout-container-uiddac6{ background-color: !important; } </style> <div class="container" id="layout-container-uiddac6" data-componentName="layout-container-uiddac6"> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid61f7 material-color-primary heading-bg-color-layout-container-uid61f7" data-automation-test-id="layout-container-uid61f7"> <style data-automation-test-id="headingColor-layout-container-uid61f7"> .heading-bg-color-layout-container-uid61f7{ background-color: #0074D9 !important; } </style> <div class="container" id="layout-container-uid61f7" data-componentName="layout-container-uid61f7"> <div class="areaheading dynamic-price-container mt-md-5 mb-5 pl-2 pr-2 pt-3 pb-2 aem-GridColumn aem-GridColumn--default--12" data-component-id="60bf9066c3eebdbf5a6e3f039c9b54ab">  <script type="text/javascript" src="/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH6fc8affca0d3b2c5bdc78e27c9425bce.js" defer></script> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH8396009a793fda25f0ad1c495ec773f4.css" type="text/css"> <div id="areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674" data-componentName="areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674" class="area-heading " data-automation-test-id="Areaheading-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674" style="background-color: null"> <div class="row"> <div class="col-12 col-md-8 " data-automation-test-id="AreaheadingHeadingText-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674" style="color:"> <h1 data-automation-test-id="heading-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674" class="component-heading h2 " id="heading-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674"> <p>Microsoft Windows Insider Preview Bounty Program</p> </h1> </div> <div class="col-12 col-md-8 col-xl-6 " data-automation-test-id="AreaheadingSubtext-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674"> <div class=" " data-automation-test-id="AreaheadingDesctext-areaheading-7139bbe5-f660-4966-9ea2-93eeae7e2674"> <br /> </div> </div> </div> </div> </div> </div> </div></div> </div> </div></div> <div class="layout-container responsivegrid mt-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uidd510 heading-bg-color-layout-container-uidd510" data-automation-test-id="layout-container-uidd510"> <style data-automation-test-id="headingColor-layout-container-uidd510"> .heading-bg-color-layout-container-uidd510{ background-color: !important; } </style> <div class="container" id="layout-container-uidd510" data-componentName="layout-container-uidd510"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-210345c2-b12a-499f-9edf-435f235bcc17"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><h2><span class="h3 mb-0">PROGRAM DESCRIPTION</span></h2> <div><p><br /> The Microsoft Windows Insider Preview bounty program invites eligible researchers across the globe to find and submit vulnerabilities that reproduce in the latest <strong>Windows Insider Preview (WIP) Canary Channel</strong>. Qualified submissions are eligible for awards from $500 USD to $100,000 USD.</p> <p>Bounties will be awarded at Microsoft’s discretion. Microsoft may award more depending on the severity and impact of the vulnerability, and the quality of the submission. This bounty program is subject to these terms and those outlined in the<strong> </strong><a class="c-hyperlink" href="https://www.microsoft.com/msrc/bounty-terms">Microsoft Bounty Terms and Conditions</a>. </p> </div> <h2><br /> <span class="h3 mb-0">ELIGIBLE SUBMISSIONS</span></h2> <div><p><br /> The goal of the bounty program is to uncover significant vulnerabilities that have a direct and demonstrable impact on the security of customers using the latest version of Windows.</p> <p>Vulnerability submissions must meet the following criteria to be eligible for bounty awards:</p> <ul class="c-list"> <li>Identify a vulnerability that was not previously reported to Microsoft.</li> <li>Such vulnerability must be Critical or Important severity as defined in the <a class="c-hyperlink" href="https://aka.ms/windowsbugbar">Microsoft Vulnerability Severity Classification for Windows</a>.</li> <li>To be eligible for General Awards, your submission must be reproducible against the <a class="c-hyperlink" href="http://aka.ms/flighthub">latest Canary Channel build</a> of Windows Insider Preview.</li> <li>To be eligible for Attack Scenario Awards, your submission must include a proof of concept demonstrating the vulnerability against the <a class="c-hyperlink" href="https://aka.ms/flighthub">latest Canary Channel build</a> of Windows Insider Preview<ul class="c-list"> <li>Include in the submission the <a class="c-hyperlink" href="http://aka.ms/flighthub">latest Canary Channel build</a><strong> </strong>that was tested and revision string in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BuildLabEx registry key.<ul class="c-list"> <li>For example, 99999.1.amd64fre.fs5_release.180914-1434.en-us</li> </ul> </li> <li>To be eligible for local Attack Scenario Awards, your proof of concept must demonstrate an ability to elevate privileges under the restricted context of an eligible sandbox. During testing, this restricted context will be achieved using the <a class="c-hyperlink" href="https://github.com/microsoft/SandboxSecurityTools">Launch App Container tool</a>. The submission must trigger the vulnerability when it is launched from this tool when using the LPAC flag. Additional capabilities may be included only if they are used by eligible sandboxes.</li> <li>Submissions that rely exclusively on a debugger for purposes such as suspending threads or modifying memory/code are not eligible for Attack Scenario Awards.</li> <li>Submissions that can demonstrate a vulnerability without the use of a debugger but provide expedited reproduction steps with the use of a debugger are still eligible for Attack Scenario Awards.</li> </ul> </li> <li>Bounty awards will be based on the version of Windows Insider Preview used in the original proof of concept at the time of submission. </li> <li>Include clear, concise, and reproducible steps, either in writing or in video format, providing our engineering team the information necessary to quickly reproduce, understand, and fix the issues.<ul class="c-list"> <li>Find examples <a class="c-hyperlink" href="https://www.microsoft.com/msrc/bounty-example-report-submission">here</a>.<strong></strong></li> </ul> </li> <li>Affect a feature that is both serviced and eligible for bounty according to the <a class="c-hyperlink" href="https://aka.ms/windowscriteria">Microsoft Security Servicing Criteria for Windows</a>.</li> <li>Use a component with known vulnerabilities. <ul class="c-list"> <li>Requires proof of reachability. For example, a small program that causes the identified vulnerable code to be run.</li> </ul> </li> </ul> <p>We request researchers include the following information to help us quickly assess their submission</p> <ul class="c-list"> <li><ul class="c-list"> </ul> Submit through the <a class="c-hyperlink" href="https://aka.ms/secure-at">MSRC Researcher Portal</a></li> <li>Indicate in the vulnerability submission which attack scenario (if any) your report qualifies for</li> <li>Describe the attack vector for the vulnerability</li> </ul> <p> </p> <h2><span class="h3 mb-0">GETTING STARTED</span></h2> <p><br /> To get started, join the Windows Insider Preview program and<strong> </strong><a class="c-hyperlink" href="https://insider.windows.com/en-us/getting-started">download the latest Canary Channel version</a>.</p> <p>For more information, see:</p> <ul class="c-list"> <li><a class="c-hyperlink" href="https://insider.windows.com/">https://insider.windows.com/</a></li> <li><a class="c-hyperlink" href="https://insider.windows.com/en-us/getting-started">https://insider.windows.com/en-us/getting-started</a></li> <li><a class="c-hyperlink" href="https://aka.ms/flighthub">https://aka.ms/flighthub</a></li> <li><a class="c-hyperlink" href="https://blogs.windows.com/windowsexperience/tag/windows-insider-program/">https://blogs.windows.com/windowsexperience/tag/windows-insider-program/</a></li> </ul> </div> <p> </p> <h2><span class="h3 mb-0">BOUNTY AWARDS</span></h2> <p><br /> Bounty awards range from $500 USD up to $100,000 USD. Higher awards are possible, at Microsoft’s sole discretion, based on the severity and impact of the vulnerability and the quality of the submission. Researchers who report vulnerabilities that do not qualify for bounty awards may still be eligible for public acknowledgment if their report leads to a vulnerability fix.</p> <p>If a reported vulnerability does not qualify for a bounty award under the Attack Scenarios, it may be eligible for a bounty award under General Awards. Eligible submissions will be awarded the single highest qualifying award.</p> <h3><br /> <span class="h4 mb-0">Attack Scenario Awards<sup>*</sup></span></h3> </div> </div> </div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid8295 heading-bg-color-layout-container-uid8295" data-automation-test-id="layout-container-uid8295"> <style data-automation-test-id="headingColor-layout-container-uid8295"> .heading-bg-color-layout-container-uid8295{ background-color: !important; } </style> <div class="container" id="layout-container-uid8295" data-componentName="layout-container-uid8295"> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uidd534" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uidd534 .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uidd534 .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uidd534 .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Attack Vector</th> <style> @media (min-width: 1200px) { #tableV2-uidd534 .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uidd534 .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uidd534 .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Scenario</th> <style> @media (min-width: 1200px) { #tableV2-uidd534 .columnName-3 { width: %; } } @media (max-width: 768px) { #tableV2-uidd534 .columnName-3 { width: %; } } @media (max-width: 450px) { #tableV2-uidd534 .columnName-3 { width: %; } } </style> <th class="columnName-3" scope="col">Maximum Award</th> </tr> </thead> <tbody> <tr id="tableV2Row-uidb154"> <td>Remote<sup>1</sup> (assumes no prior execution)</td> <td> <div> Unauthenticated<sup>2</sup> non-sandboxed code execution with no user interaction </div> </td> <td> <div> $100,000 </div> </td> </tr> <tr id="tableV2Row-uidc617"> <td> </td> <td> <div> Demonstrated<sup>3</sup> unauthenticated and unauthorized access to private<sup>4</sup> user data or data that can be used to weaken existing user protections with little<sup>5</sup> or no user interaction </div> </td> <td> <div> $50,000 </div> </td> </tr> <tr id="tableV2Row-uide430"> <td> </td> <td> <div> Unauthenticated data destruction or persistent denial of service with no user interaction </div> </td> <td> <div> $30,000 </div> </td> </tr> <tr id="tableV2Row-uid604f"> <td>Local (assumes prior execution)</td> <td> <div> Sandbox<sup>6</sup> escape with little or no user interaction </div> </td> <td> <div> $20,000 </div> </td> </tr> <tr id="tableV2Row-uid5e2f"> <td> </td> <td> <div> Demonstrated unauthorized access to private user data from a sandboxed<sup>6</sup> process with no user interaction<br /> </div> </td> <td> <div> $20,000<br /> </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid8bdf heading-bg-color-layout-container-uid8bdf" data-automation-test-id="layout-container-uid8bdf"> <style data-automation-test-id="headingColor-layout-container-uid8bdf"> .heading-bg-color-layout-container-uid8bdf{ background-color: !important; } </style> <div class="container" id="layout-container-uid8bdf" data-componentName="layout-container-uid8bdf"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-16343a9e-0887-4d21-bca3-daf348234190"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><p><sup>*</sup>Proof-of-concepts for an Attack Scenario Award must exercise a vulnerability within a shipped Windows application. This includes, without limitation, shipped clients, servers, and services.</p> <p><sup>1</sup><em>Remote</em> attacks are only those attacks that do not require physical proximity. Physical proximity attacks include but are not limited to attacks requiring Wi-Fi, Bluetooth, or other short range radio protocols.</p> <p><em><sup>2</sup>Unauthenticated</em> attacks are only those attacks that require no credentials or being part of a domain, and lateral movement attacks are strictly out of scope as these would be considered post-auth. Additionally, attacks that require the victim to already have the application open, download an attachment, or interact with the application in any way are out of scope.</p> <p><em><sup>3</sup>Demonstrated</em> means submission must include a proof of concept that shows how the reported vulnerability can be used by the attacker to retrieve data.</p> <p><em><sup>4</sup>Private data</em> means user files, emails, photos or similar data protected behind a Windows<strong> </strong><a class="c-hyperlink" href="https://www.microsoft.com/msrc/windows-security-servicing-criteria">security boundary</a>.</p> <p><em><sup>5</sup>Little user</em> interaction includes, without limitation, clicking a file or browsing to a website. </p> <p><em><sup>6</sup>Eligible sandboxes</em> are New Microsoft Edge based on Chromium renderer process, Windows Defender Sandbox (MsMpEngCP), WinHTTP Web Proxy Auto-Discovery Service (WPAD) sandboxed process, UtcDecoderHost.exe sandboxed process. <em>Ineligible sandboxes</em> are AppContainer (AC) and Internet Explorer sandbox, these are eligible for general bounty awards (see below). </p> </div> </div> </div> </div> </div></div> <div class="layout-container responsivegrid mb-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid299b heading-bg-color-layout-container-uid299b" data-automation-test-id="layout-container-uid299b"> <style data-automation-test-id="headingColor-layout-container-uid299b"> .heading-bg-color-layout-container-uid299b{ background-color: !important; } </style> <div class="container" id="layout-container-uid299b" data-componentName="layout-container-uid299b"> </div> </div></div> <div class="layout-container responsivegrid mb-3 mb-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3522 heading-bg-color-layout-container-uid3522" data-automation-test-id="layout-container-uid3522"> <style data-automation-test-id="headingColor-layout-container-uid3522"> .heading-bg-color-layout-container-uid3522{ background-color: !important; } </style> <div class="container" id="layout-container-uid3522" data-componentName="layout-container-uid3522"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-5118ad0f-27b9-4904-b41a-898409fc0dc7"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><h3><span class="h4 mb-0">General Awards</span></h3> <p> </p> </div> </div> </div> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uide948" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uide948 .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uide948 .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uide948 .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Security Impact</th> <style> @media (min-width: 1200px) { #tableV2-uide948 .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uide948 .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uide948 .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Maximum Award</th> </tr> </thead> <tbody> <tr id="tableV2Row-uid69c7"> <td>Remote Code Execution</td> <td> <div> $5,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Elevation of Privilege</td> <td> <div> $2,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Security Feature Bypass</td> <td> <div> $1,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Information Disclosure</td> <td> <div> $1,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Spoofing</td> <td> <div> $1,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Tampering</td> <td> <div> $1,000 </div> </td> </tr> <tr id="tableV2Row-uid69c7"> <td>Denial of Service</td> <td> <div> $500 </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid mt-4 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uida25f heading-bg-color-layout-container-uida25f" data-automation-test-id="layout-container-uida25f"> <style data-automation-test-id="headingColor-layout-container-uida25f"> .heading-bg-color-layout-container-uida25f{ background-color: !important; } </style> <div class="container" id="layout-container-uida25f" data-componentName="layout-container-uida25f"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-82379c38-0a98-4cb4-943b-30ff1cfb358f"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><h2><span class="h3 mb-0">OUT OF SCOPE SUBMISSIONS AND VULNERABILITIES</span></h2> <p><br /> Microsoft is happy to receive and review each vulnerability report on a case-by-case basis, but some vulnerability types may not qualify for bounty reward. Here are some of the common low-severity or out of scope issues that typically do not earn bounty rewards: </p> <ul class="c-list"> <li>Any submission that does not demonstrate testing and reproduction in Windows Insider Preview Canary Channel at time of submission<ul class="c-list"> <li>Crash dumps that do not demonstrate the reported behavior on the <a class="c-hyperlink" href="https://aka.ms/flighthub">latest Canary Channel build</a></li> <li>Versions of <a class="c-hyperlink" href="https://docs.microsoft.com/en-us/windows/release-health/release-information">Windows 10</a></li> <li>Any version of <a class="c-hyperlink" href="https://docs.microsoft.com/en-us/windows-server/get-started/windows-server-release-info">Windows Server</a> other than latest, fully patched version at time of submission</li> </ul> </li> <li>Publicly-disclosed vulnerabilities which are already known to Microsoft and the wider security community.</li> <li>Low or Moderate severity vulnerabilities</li> <li>Submissions impacting features not serviced and eligible for bounty according to the <a class="c-hyperlink" href="https://aka.ms/windowscriteria">Microsoft Security Servicing Criteria for Windows</a>.</li> <li>Vulnerabilities in Windows Store, Windows Apps, firmware, third party drivers, or third-party software in Windows.</li> <li>Vulnerabilities requiring extensive or unlikely user actions.</li> <li>Vulnerabilities that are only reachable via Microsoft Internet Explorer or Microsoft Edge Legacy. Please use the new <a class="c-hyperlink" href="https://microsoft.com/edge">Microsoft Edge</a>. </li> <li>Vulnerability patterns or categories for which Microsoft is actively investigating broad mitigations.</li> <li>Vulnerabilities in Windows components for which Microsoft is actively working on large scale fixes.<ul class="c-list"> <li>Vulnerabilities in Remote Access Service (RAS) server components are not eligible for an Attack Scenario Award.</li> </ul> </li> <li>Vulnerabilities that rely on default security settings being downgraded or the system to use uncommon configurations. Common configurations that are either default configurations or configurations that are specifically recommended on MSDN or official Microsoft documentation. Examples of uncommon configurations include, without limitation:<ul class="c-list"> <li>Vulnerabilities that require enabling Server Message Block protocol (SMBv1)</li> <li>Vulnerabilities in features Microsoft recommends against using, such as <a class="c-hyperlink" href="https://learn.microsoft.com/en-us/windows-hardware/drivers/print/standard-xps-filters">XPS Filters</a></li> <li>Sandbox escapes with User Account Control (UAC) disabled </li> <li>Enabling WINS or other legacy, insecure protocols</li> <li>Proof-of-concepts that exercise a vulnerability within a custom application are not eligible for an Attack Scenario Award. This includes, without limitation, fuzzing harness, custom clients, and custom servers.</li> </ul> </li> </ul> <p> </p> <h2><span class="h3 mb-0">ADDITIONAL INFORMATION</span></h2> <p>For additional information please see our<strong> </strong><a class="c-hyperlink" href="https://www.microsoft.com/en-us/msrc/faqs-bounty?rtc=1">FAQ</a>.</p> <ul class="c-list"> <li>If we receive multiple bug reports for the same issue from different parties, the bounty will be granted to the first submission.</li> <li>If a duplicate report provides us new information that was previously unknown to Microsoft, we may award a differential to the duplicate submission. </li> <li>If a submission is potentially eligible for multiple bounty programs, you will receive the single highest payout award from a single bounty program.</li> <li>Microsoft reserves the right to reject any submission at our sole discretion that we determine does not meet these criteria.</li> </ul> <p> </p> <h2><span class="h4 mb-0"><span class="h3 mb-0">REVISION HISTORY</span></span></h2> <ul class="c-list"> <li>July 26, 2017: Program launched</li> <li>January 17, 2019: Added Security Servicing Criteria and updated duplicate report guidelines. Added temporary Windows sandbox escape scope and increased award levels.</li> <li>October 3, 2019: Removed Defender AV sandbox escape bounty bonus. Added How Do I Provide My Report section. </li> <li>February 10, 2020: Renamed "Bounty Scope" section to "Out of Scope Submissions and Vulnerabilities."</li> <li>April 22, 2020: Added out of scope - vulnerabilities that rely on Microsoft Internet Explorer or Microsoft Edge Legacy and vulnerability patterns or categories for which Microsoft is actively investigating broad mitigations, including examples.</li> <li>July 24, 2020: Added attack scenario awards and general award table, increasing top award to $100,000. Added requirement that eligible submissions must show testing and repro on Dev Channel. Separated submission eligibility into required criteria and recommended criteria.</li> <li>August 27, 2020: Moved “clear, concise, reproducible steps” from recommended to required. Added clarification that “unauthenticated” is required for Remote attack scenarios. Added definition for “demonstrated” in attack scenarios. </li> <li>September 1, 2021: Added definition for “unauthenticated” in attack scenarios. Updated “Eligible Submissions” section to provide clarity for what to include in a submission. Updated list of eligible sandboxes.</li> <li>December 8, 2021: Added enabling WINS and other legacy products to Out-of-Scope under the Vulnerabilities that rely on default security settings being downgraded or the system to use uncommon configuration bullet. </li> <li>December 20, 2021: Added additional detail to the Unauthenticated RCE Scenario exclusion in footnote 1.</li> <li>January 18, 2022: Removed local vulnerabilities involving race conditions in user-mode components from Out-of-Scope.</li> <li>January 20, 2022: Removed local vulnerabilities involving file path redirection through junctions or mountpoints from Out-of-Scope.</li> <li>February 25, 2022: Added additional detail on what is required in a proof-of-concept.</li> <li>March 4, 2022: Clarified common configuration definition in the Out-of-Scope section. </li> <li>May 4, 2022: Added additional detail for what is required in a proof-of-concept.</li> <li>October 31, 2022: Updated general and scenario award requirements in the Eligible Submissions section.</li> <li>February 6, 2023: Added out of scope – vulnerabilities in Windows components for which Microsoft is actively working on large scale fixes. Remote Access Service (RAS) server components not eligible for Attack Scenario awards. </li> <li>February 27 2023: Added to out of scope – vulnerabilities in features Microsoft recommends against using, such as <strong>XPS Filters.</strong></li> <li>March 8, 2023: Updated from “latest Dev Channel build” to “latest Canary Channel build”.</li> <li>April 5, 2023: Added clarification for debugger use for Attack Scenario Awards.</li> <li>April 19, 2023: Added additional detail for what is required for local Attack Scenario Awards.</li> <li>June 23, 2023: Updated remote Attack Scenario award and updated footnote 2.</li> <li>July 5, 2023: Added limited-time bounty award category.</li> <li>June 5, 2024: Removed limited-time bounty award category that has ended. Added clarification for issues that require physical proximity.</li> </ul> </div> </div> </div> </div> </div></div> </div> </div> </div> </main></div> <div class="universalfooter aem-GridColumn aem-GridColumn--default--12" data-component-id="873fa1f863becf63b38092282d4ea0b1">   <div id="footerArea" class="uhf" data-m='{"cN":"footerArea","cT":"Area_coreuiArea","id":"a2Body","sN":2,"aN":"Body"}'> <div id="footerRegion" data-region-key="footerregion" data-m='{"cN":"footerRegion","cT":"Region_coreui-region","id":"r1a2","sN":1,"aN":"a2"}' > <div id="footerUniversalFooter" data-m='{"cN":"footerUniversalFooter","cT":"Module_coreui-universalfooter","id":"m1r1a2","sN":1,"aN":"r1a2"}' data-module-id="Category|footerRegion|coreui-region|footerUniversalFooter|coreui-universalfooter"> <footer id="uhf-footer" class="c-uhff context-uhf" data-uhf-mscc-rq="false" data-footer-footprint="/MSMSRC/MSMSRCFooter, fromService: True" data-m='{"cN":"Uhf footer_cont","cT":"Container","id":"c1m1r1a2","sN":1,"aN":"m1r1a2"}'> <nav class="c-uhff-nav" aria-label="Footer Resource links" data-m='{"cN":"Footer nav_cont","cT":"Container","id":"c1c1m1r1a2","sN":1,"aN":"c1m1r1a2"}'> <div class="c-uhff-nav-row"> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn1_cont","cT":"Container","id":"c1c1c1m1r1a2","sN":1,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">What's new</div> <ul class="c-list f-bare"> <li> <a aria-label="Surface Pro What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/surface/devices/surface-pro-11th-edition" data-m='{"cN":"Footer_WhatsNew_NewSurfacePro_nav","id":"n1c1c1c1m1r1a2","sN":1,"aN":"c1c1c1m1r1a2"}'>Surface Pro</a> </li> <li> <a aria-label="Surface Laptop What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/surface/devices/surface-laptop-7th-edition" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptop_nav","id":"n2c1c1c1m1r1a2","sN":2,"aN":"c1c1c1m1r1a2"}'>Surface Laptop</a> </li> <li> <a aria-label="Surface Laptop Studio 2 What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/d/Surface-Laptop-Studio-2/8rqr54krf1dz" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptopStudio2_nav","id":"n3c1c1c1m1r1a2","sN":3,"aN":"c1c1c1m1r1a2"}'>Surface Laptop Studio 2</a> </li> <li> <a aria-label="Surface Laptop Go 3 What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/d/Surface-Laptop-Go-3/8p0wwgj6c6l2" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptopGo3_nav","id":"n4c1c1c1m1r1a2","sN":4,"aN":"c1c1c1m1r1a2"}'>Surface Laptop Go 3</a> </li> <li> <a aria-label="Microsoft Copilot What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-copilot" data-m='{"cN":"Footer_WhatsNew_CopilotMicrosoft_nav","id":"n5c1c1c1m1r1a2","sN":5,"aN":"c1c1c1m1r1a2"}'>Microsoft Copilot</a> </li> <li> <a aria-label="AI in Windows What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/windows/copilot-ai-features" data-m='{"cN":"Whatsnew_AIinWindows_nav","id":"n6c1c1c1m1r1a2","sN":6,"aN":"c1c1c1m1r1a2"}'>AI in Windows</a> </li> <li> <a aria-label="Explore Microsoft products What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-products-and-apps" data-m='{"cN":"Footer_WhatsNew_ExploreMicrosoftProducts_nav","id":"n7c1c1c1m1r1a2","sN":7,"aN":"c1c1c1m1r1a2"}'>Explore Microsoft products</a> </li> <li> <a aria-label="Windows 11 apps What's new" class="c-uhff-link" href="https://www.microsoft.com/windows/windows-11-apps" data-m='{"cN":"Footer_WhatsNew_Windows_11_apps_nav","id":"n8c1c1c1m1r1a2","sN":8,"aN":"c1c1c1m1r1a2"}'>Windows 11 apps</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn2_cont","cT":"Container","id":"c2c1c1m1r1a2","sN":2,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Microsoft Store</div> <ul class="c-list f-bare"> <li> <a aria-label="Account profile Microsoft Store" class="c-uhff-link" href="https://account.microsoft.com/" data-m='{"cN":"Footer_StoreandSupport_AccountProfile_nav","id":"n1c2c1c1m1r1a2","sN":1,"aN":"c2c1c1m1r1a2"}'>Account profile</a> </li> <li> <a aria-label="Download Center Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/download" data-m='{"cN":"Footer_StoreandSupport_DownloadCenter_nav","id":"n2c2c1c1m1r1a2","sN":2,"aN":"c2c1c1m1r1a2"}'>Download Center</a> </li> <li> <a aria-label="Microsoft Store support Microsoft Store" class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2139749" data-m='{"cN":"Footer_StoreandSupport_SalesAndSupport_nav","id":"n3c2c1c1m1r1a2","sN":3,"aN":"c2c1c1m1r1a2"}'>Microsoft Store support</a> </li> <li> <a aria-label="Returns Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/returns" data-m='{"cN":"Footer_StoreandSupport_Returns_nav","id":"n4c2c1c1m1r1a2","sN":4,"aN":"c2c1c1m1r1a2"}'>Returns</a> </li> <li> <a aria-label="Order tracking Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/order-tracking" data-m='{"cN":"Footer_StoreandSupport_OrderTracking_nav","id":"n5c2c1c1m1r1a2","sN":5,"aN":"c2c1c1m1r1a2"}'>Order tracking</a> </li> <li> <a aria-label="Certified Refurbished Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/certified-refurbished-products" data-m='{"cN":"Footer_StoreandSupport_StoreLocations_nav","id":"n6c2c1c1m1r1a2","sN":6,"aN":"c2c1c1m1r1a2"}'>Certified Refurbished</a> </li> <li> <a aria-label="Microsoft Store Promise Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/why-microsoft-store?icid=footer_why-msft-store_7102020" data-m='{"cN":"Footer_StoreandSupport_MicrosoftPromise_nav","id":"n7c2c1c1m1r1a2","sN":7,"aN":"c2c1c1m1r1a2"}'>Microsoft Store Promise</a> </li> <li> <a aria-label="Flexible Payments Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/payment-financing-options?icid=footer_financing_vcc" data-m='{"cN":"Footer_StoreandSupport_Financing_nav","id":"n8c2c1c1m1r1a2","sN":8,"aN":"c2c1c1m1r1a2"}'>Flexible Payments</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn3_cont","cT":"Container","id":"c3c1c1m1r1a2","sN":3,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Education</div> <ul class="c-list f-bare"> <li> <a aria-label="Microsoft in education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education" data-m='{"cN":"Footer_Education_MicrosoftInEducation_nav","id":"n1c3c1c1m1r1a2","sN":1,"aN":"c3c1c1m1r1a2"}'>Microsoft in education</a> </li> <li> <a aria-label="Devices for education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/devices/overview" data-m='{"cN":"Footer_Education_DevicesforEducation_nav","id":"n2c3c1c1m1r1a2","sN":2,"aN":"c3c1c1m1r1a2"}'>Devices for education</a> </li> <li> <a aria-label="Microsoft Teams for Education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/products/teams" data-m='{"cN":"Footer_Education_MicrosoftTeamsforEducation_nav","id":"n3c3c1c1m1r1a2","sN":3,"aN":"c3c1c1m1r1a2"}'>Microsoft Teams for Education</a> </li> <li> <a aria-label="Microsoft 365 Education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/products/microsoft-365" data-m='{"cN":"Footer_Education_Microsoft365Education_nav","id":"n4c3c1c1m1r1a2","sN":4,"aN":"c3c1c1m1r1a2"}'>Microsoft 365 Education</a> </li> <li> <a aria-label="How to buy for your school Education" class="c-uhff-link" href="https://www.microsoft.com/education/how-to-buy" data-m='{"cN":"Footer_Howtobuyforyourschool_nav","id":"n5c3c1c1m1r1a2","sN":5,"aN":"c3c1c1m1r1a2"}'>How to buy for your school</a> </li> <li> <a aria-label="Educator training and development Education" class="c-uhff-link" href="https://education.microsoft.com/" data-m='{"cN":"Footer_Education_EducatorTrainingDevelopment_nav","id":"n6c3c1c1m1r1a2","sN":6,"aN":"c3c1c1m1r1a2"}'>Educator training and development</a> </li> <li> <a aria-label="Deals for students and parents Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/education" data-m='{"cN":"Footer_Education_DealsForStudentsandParents_nav","id":"n7c3c1c1m1r1a2","sN":7,"aN":"c3c1c1m1r1a2"}'>Deals for students and parents</a> </li> <li> <a aria-label="Azure for students Education" class="c-uhff-link" href="https://azure.microsoft.com/en-us/free/students/" data-m='{"cN":"Footer_Education_Azureforstudents_nav","id":"n8c3c1c1m1r1a2","sN":8,"aN":"c3c1c1m1r1a2"}'>Azure for students</a> </li> </ul> </div> </div> <div class="c-uhff-nav-row"> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn4_cont","cT":"Container","id":"c4c1c1m1r1a2","sN":4,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Business</div> <ul class="c-list f-bare"> <li> <a aria-label="Microsoft Cloud Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-cloud" data-m='{"cN":"Footer_Business_Microsoft_Cloud_nav","id":"n1c4c1c1m1r1a2","sN":1,"aN":"c4c1c1m1r1a2"}'>Microsoft Cloud</a> </li> <li> <a aria-label="Microsoft Security Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/security" data-m='{"cN":"Footer_Business_Microsoft Security_nav","id":"n2c4c1c1m1r1a2","sN":2,"aN":"c4c1c1m1r1a2"}'>Microsoft Security</a> </li> <li> <a aria-label="Dynamics 365 Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/dynamics-365" data-m='{"cN":"Footer_Business_MicrosoftDynamics365_nav","id":"n3c4c1c1m1r1a2","sN":3,"aN":"c4c1c1m1r1a2"}'>Dynamics 365</a> </li> <li> <a aria-label="Microsoft 365 Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-365/business" data-m='{"cN":"Footer_Business_M365_nav","id":"n4c4c1c1m1r1a2","sN":4,"aN":"c4c1c1m1r1a2"}'>Microsoft 365</a> </li> <li> <a aria-label="Microsoft Power Platform Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/power-platform" data-m='{"cN":"Footer_DeveloperAndIT_Power Platform_nav","id":"n5c4c1c1m1r1a2","sN":5,"aN":"c4c1c1m1r1a2"}'>Microsoft Power Platform</a> </li> <li> <a aria-label="Microsoft Teams Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"Footer_Business_Microsoft365_nav","id":"n6c4c1c1m1r1a2","sN":6,"aN":"c4c1c1m1r1a2"}'>Microsoft Teams</a> </li> <li> <a aria-label="Microsoft 365 Copilot Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-365/copilot/copilot-for-work" data-m='{"cN":"Footer_CopilotMicrosoft365_nav","id":"n7c4c1c1m1r1a2","sN":7,"aN":"c4c1c1m1r1a2"}'>Microsoft 365 Copilot</a> </li> <li> <a aria-label="Small Business Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/business?icid=CNavBusinessStore" data-m='{"cN":"Footer_Business-SmallBusiness_nav","id":"n8c4c1c1m1r1a2","sN":8,"aN":"c4c1c1m1r1a2"}'>Small Business</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn5_cont","cT":"Container","id":"c5c1c1m1r1a2","sN":5,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Developer & IT</div> <ul class="c-list f-bare"> <li> <a aria-label="Azure Developer & IT" class="c-uhff-link" href="https://azure.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftAzure_nav","id":"n1c5c1c1m1r1a2","sN":1,"aN":"c5c1c1m1r1a2"}'>Azure</a> </li> <li> <a aria-label="Developer Center Developer & IT" class="c-uhff-link" href="https://developer.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_DeveloperCenter_nav","id":"n2c5c1c1m1r1a2","sN":2,"aN":"c5c1c1m1r1a2"}'>Developer Center</a> </li> <li> <a aria-label="Documentation Developer & IT" class="c-uhff-link" href="https://learn.microsoft.com/docs/" data-m='{"cN":"Footer_DeveloperAndIT_Documentation_nav","id":"n3c5c1c1m1r1a2","sN":3,"aN":"c5c1c1m1r1a2"}'>Documentation</a> </li> <li> <a aria-label="Microsoft Learn Developer & IT" class="c-uhff-link" href="https://learn.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftLearn_nav","id":"n4c5c1c1m1r1a2","sN":4,"aN":"c5c1c1m1r1a2"}'>Microsoft Learn</a> </li> <li> <a aria-label="Microsoft Tech Community Developer & IT" class="c-uhff-link" href="https://techcommunity.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftTechCommunity_nav","id":"n5c5c1c1m1r1a2","sN":5,"aN":"c5c1c1m1r1a2"}'>Microsoft Tech Community</a> </li> <li> <a aria-label="Azure Marketplace Developer & IT" class="c-uhff-link" href="https://azuremarketplace.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_AzureMarketplace_nav","id":"n6c5c1c1m1r1a2","sN":6,"aN":"c5c1c1m1r1a2"}'>Azure Marketplace</a> </li> <li> <a aria-label="AppSource Developer & IT" class="c-uhff-link" href="https://appsource.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_AppSource_nav","id":"n7c5c1c1m1r1a2","sN":7,"aN":"c5c1c1m1r1a2"}'>AppSource</a> </li> <li> <a aria-label="Visual Studio Developer & IT" class="c-uhff-link" href="https://visualstudio.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftVisualStudio_nav","id":"n8c5c1c1m1r1a2","sN":8,"aN":"c5c1c1m1r1a2"}'>Visual Studio</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn6_cont","cT":"Container","id":"c6c1c1m1r1a2","sN":6,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Company</div> <ul class="c-list f-bare"> <li> <a aria-label="Careers Company" class="c-uhff-link" href="https://careers.microsoft.com/" data-m='{"cN":"Footer_Company_Careers_nav","id":"n1c6c1c1m1r1a2","sN":1,"aN":"c6c1c1m1r1a2"}'>Careers</a> </li> <li> <a aria-label="About Microsoft Company" class="c-uhff-link" href="https://www.microsoft.com/about" data-m='{"cN":"Footer_Company_AboutMicrosoft_nav","id":"n2c6c1c1m1r1a2","sN":2,"aN":"c6c1c1m1r1a2"}'>About Microsoft</a> </li> <li> <a aria-label="Company news Company" class="c-uhff-link" href="https://news.microsoft.com/" data-m='{"cN":"Footer_Company_CompanyNews_nav","id":"n3c6c1c1m1r1a2","sN":3,"aN":"c6c1c1m1r1a2"}'>Company news</a> </li> <li> <a aria-label="Privacy at Microsoft Company" class="c-uhff-link" href="https://privacy.microsoft.com/en-us" data-m='{"cN":"Footer_Company_PrivacyAtMicrosoft_nav","id":"n4c6c1c1m1r1a2","sN":4,"aN":"c6c1c1m1r1a2"}'>Privacy at Microsoft</a> </li> <li> <a aria-label="Investors Company" class="c-uhff-link" href="https://www.microsoft.com/investor/default.aspx" data-m='{"cN":"Footer_Company_Investors_nav","id":"n5c6c1c1m1r1a2","sN":5,"aN":"c6c1c1m1r1a2"}'>Investors</a> </li> <li> <a aria-label="Diversity and inclusion Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/diversity/" data-m='{"cN":"Footer_Company_DiversityAndInclusion_nav","id":"n6c6c1c1m1r1a2","sN":6,"aN":"c6c1c1m1r1a2"}'>Diversity and inclusion</a> </li> <li> <a aria-label="Accessibility Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/accessibility" data-m='{"cN":"Footer_Company_Accessibility_nav","id":"n7c6c1c1m1r1a2","sN":7,"aN":"c6c1c1m1r1a2"}'>Accessibility</a> </li> <li> <a aria-label="Sustainability Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/sustainability/" data-m='{"cN":"Footer_Company_Sustainability_nav","id":"n8c6c1c1m1r1a2","sN":8,"aN":"c6c1c1m1r1a2"}'>Sustainability</a> </li> </ul> </div> </div> </nav> <div class="c-uhff-base"> <a id="locale-picker-link" aria-label="Content Language Selector. Currently set to English (United States)" class="c-uhff-link c-uhff-lang-selector c-glyph glyph-world" href="https://www.microsoft.com/en-us/locale.aspx" data-m='{"cN":"locale_picker(US)_nav","id":"n7c1c1m1r1a2","sN":7,"aN":"c1c1m1r1a2"}'>English (United States)</a> <a data-m='{"id":"n8c1c1m1r1a2","sN":8,"aN":"c1c1m1r1a2"}' href="https://aka.ms/yourcaliforniaprivacychoices" class='c-uhff-link c-uhff-ccpa'> <svg role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43"> <title>Your Privacy Choices Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"/> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"/> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"/> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"/> </svg> <span>Your Privacy Choices</span> </a> <noscript> <a data-m='{"id":"n9c1c1m1r1a2","sN":9,"aN":"c1c1m1r1a2"}' href="https://aka.ms/yourcaliforniaprivacychoices" class='c-uhff-link c-uhff-ccpa'> <svg role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43"> <title>Your Privacy Choices Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"/> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"/> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"/> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"/> </svg> <span>Your Privacy Choices</span> </a> </noscript> <a data-m='{"id":"n10c1c1m1r1a2","sN":10,"aN":"c1c1m1r1a2"}' href="https://go.microsoft.com/fwlink/?linkid=2259814" class="c-uhff-link c-uhff-consumer"> <span>Consumer Health Privacy</span> </a> <nav aria-label="Microsoft corporate links"> <ul class="c-list f-bare" data-m='{"cN":"Corp links_cont","cT":"Container","id":"c11c1c1m1r1a2","sN":11,"aN":"c1c1m1r1a2"}'> <li id="c-uhff-footer_sitemap"> <a class="c-uhff-link" href="https://www.microsoft.com/en-us/sitemap1.aspx" data-mscc-ic="false" data-m='{"cN":"Footer_Sitemap_nav","id":"n1c11c1c1m1r1a2","sN":1,"aN":"c11c1c1m1r1a2"}'>Sitemap</a> </li> <li id="c-uhff-footer_contactus"> <a class="c-uhff-link" href="https://support.microsoft.com/contactus" data-mscc-ic="false" data-m='{"cN":"Footer_ContactUs_nav","id":"n2c11c1c1m1r1a2","sN":2,"aN":"c11c1c1m1r1a2"}'>Contact Microsoft</a> </li> <li id="c-uhff-footer_privacyandcookies"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-mscc-ic="false" data-m='{"cN":"Footer_PrivacyandCookies_nav","id":"n3c11c1c1m1r1a2","sN":3,"aN":"c11c1c1m1r1a2"}'>Privacy </a> </li> <li class=" x-hidden" id="c-uhff-footer_managecookies"> <a class="c-uhff-link" href="#" data-mscc-ic="false" data-m='{"cN":"Footer_ManageCookies_nav","id":"n4c11c1c1m1r1a2","sN":4,"aN":"c11c1c1m1r1a2"}'>Manage cookies</a> </li> <li id="c-uhff-footer_termsofuse"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?LinkID=206977" data-mscc-ic="false" data-m='{"cN":"Footer_TermsOfUse_nav","id":"n5c11c1c1m1r1a2","sN":5,"aN":"c11c1c1m1r1a2"}'>Terms of use</a> </li> <li id="c-uhff-footer_trademarks"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2196228" data-mscc-ic="false" data-m='{"cN":"Footer_Trademarks_nav","id":"n6c11c1c1m1r1a2","sN":6,"aN":"c11c1c1m1r1a2"}'>Trademarks</a> </li> <li id="c-uhff-footer_safetyandeco"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2196227" data-mscc-ic="false" data-m='{"cN":"Footer_SafetyAndEco_nav","id":"n7c11c1c1m1r1a2","sN":7,"aN":"c11c1c1m1r1a2"}'>Safety & eco</a> </li> <li id="c-uhff-recycling"> <a class="c-uhff-link" href="https://www.microsoft.com/en-us/legal/compliance/recycling" data-mscc-ic="false" data-m='{"cN":"Recycling_nav","id":"n8c11c1c1m1r1a2","sN":8,"aN":"c11c1c1m1r1a2"}'>Recycling</a> </li> <li id="c-uhff-footer_aboutourads"> <a class="c-uhff-link" href="https://choice.microsoft.com" data-mscc-ic="false" data-m='{"cN":"Footer_AboutourAds_nav","id":"n9c11c1c1m1r1a2","sN":9,"aN":"c11c1c1m1r1a2"}'>About our ads</a> </li> <li>© Microsoft 2024</li> </ul> </nav> </div> </footer> <script id="uhf-footer-ccpa"> const globalPrivacyControlEnabled = navigator.globalPrivacyControl; const GPC_DataSharingOptIn = (globalPrivacyControlEnabled) ? false : checkThirdPartyAdsOptOutCookie(); function checkThirdPartyAdsOptOutCookie() { try { const ThirdPartyAdsOptOutCookieName = '3PAdsOptOut'; var cookieValue = getCookie(ThirdPartyAdsOptOutCookieName); return cookieValue != 1; } catch { return true; } } function getCookie(cookieName) { var cookieValue = document.cookie.match('(^|;)\\s*' + cookieName + '\\s*=\\s*([^;]+)'); return (cookieValue) ? cookieValue[2] : ''; } </script> </div> </div> </div> <script src="https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js"></script><script src="https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1"></script> </div> </div> </div> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH13abf4cf4f8384d04a599349524dbbad.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH10908f1c465eeadc74b1c17c9515eb8a.js"></script> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH5ee9e4e4e0a5fd39092e63d2d102b12b.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js"></script>  <script type="text/javascript"> (function(){ var partnerScripts = { "meta": { "partnerJsHash": "ACSHASH00f6c26de9c7c0a1e7b10d8bb358e008" } }; window.partnerScripts = partnerScripts; })(); </script> <script id="mediapixel"> //<![CDATA[ //_pageBITags=jsonElement; //]]> </script> <script type="text/javascript" id="contentsquare"> (function(){ var contentSq = { "entryFile": "https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js", }; if (typeof window["partnerScripts"]==="undefined"){ window["partnerScripts"]={}; } window["partnerScripts"]["contentSquare"] = contentSq; })(); </script>   <div class="cookie-config" data-isenabled="false"></div> <script src="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js"></script>  <div id='customFeatureControl' enabledFeatures="contentbackfillgenerate,esiproductcards,feature-controlled-mwf,uhf-ms-io-endpoint,uhf-esi-cv,uhf-esi-cache,fraud-greenid,contentsquare,mediapixel,holiday-themer,lazyload-static-components,clientlibDefer,upsellEnabled,contentbackfillpkgdelete,healthcheck,contentbackfillhttpgenerate,perf-tracker-1ds,dynamic-bundle,cvIncrementer,tentingEnabled,chatCookiesImplemented,alertCountDownWithoutServerTime,pdpDynamicRendering,bundlesDynamicRendering,contentbackfillmetadatachangesvideo,contentbackfillmetadatachangesnonvideo,listDynamicRendering,experimentation-without-personalization,generic-list-importer,combinedUHF,cvCallEnabled,m365ProductCatalog,support-unsupported-locales,deferClickTale,videoLazyLoad,prefetchFontsEnabled,enable-code-isolation,imageLinkTag,fetchPriority,contentIngestionAgent,enableClickgroupTelemetry,imageLazyLoad,contentIngestionAgent-dispatcher2westus2Agent,isCacheControlFeatureEnabled,feature-controlled-content-card,lcpPrioritizationPhase1,ocReimagineTelemetry,deferScriptsEnabled,lcpPrioritizationPhase2,ocReimagineSlotNumberTelemetry,contentIngestionAgent-dispatcher1westus2Agent,ocReimagineComponentNameTelemetry,ocReimagineTemplateNameTelemetry,ptePhase1,extended-html-minification-sites,dynamicPrice,gl-auto-config,displayV35Toggle,chatCustomEndpoint,enableBoostPersonalization,ocReimagineTelemetryTemplateNameSwap,enableEmailConnector,enable-eventingService,ocReimagineAIAssistant,acsPMEFeatureEnabled,ocReimagineCustomerApiUrl,ocReimagineCustomerFilterApiUrl"></div> <div class='oneds-config' data-instrumentationkey='c066bee12c6f4b758071186c018d81f6-cc260522-939f-4a36-a72c-021a3f946bc4-7363' data-isenabled='true' data-env='prod' data-market='en-us' data-pageName='Windows Bounty | MSRC' data-urlCollectQuery='true' data-urlCollectHash='true' data-autoCapturelineage='true' data-autoCaptureresize='true' data-autoCapturescroll='true' data-initialize1DSEventName="consent" data-tenantName='msrc' data-tenantTitle='MSRC Web Admins' data-tenantDomain='microsoft' data-tenantSiteName='microsoft' data-tenantNameProperty='tenantName' data-tenantTitleProperty='tenantTitle' data-tenantDomainProperty='tenantDomain' data-tenantSiteNameProperty='tenantSiteName' data-max1DSInitializeDelayInSeconds='1'> </div> <script src="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHc3aec3d03bc5447975e3ee25b53f6c32.js"></script>  <script type="text/javascript" src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js" async></script>  </body> </html>

CINXE.COM

Windows Bounty | MSRC