Microsoft Security Servicing Criteria for Windows

<!DOCTYPE HTML> <html lang="en-US" dir="ltr"> <head>  <link rel="dns-prefetch" href="https://cdn-dynmedia-1.microsoft.com"/> <link rel="preconnect" href="https://cdn-dynmedia-1.microsoft.com"/> <link rel="dns-prefetch" href="https://web.vortex.data.microsoft.com"/> <link rel="preconnect" href="https://web.vortex.data.microsoft.com"/> <link rel="dns-prefetch" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/> <link rel="preconnect" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/> <link rel="dns-prefetch" href="https://c.s-microsoft.com"/> <link rel="preconnect" href="https://c.s-microsoft.com"/> <link rel="dns-prefetch" href="https://analytics.tiktok.com"/> <link rel="preconnect" href="https://analytics.tiktok.com"/> <link rel="dns-prefetch" href="https://bat.bing.com"/> <link rel="preconnect" href="https://bat.bing.com"/> <link rel="dns-prefetch" href="https://cdnssl.clicktale.net"/> <link rel="preconnect" href="https://cdnssl.clicktale.net"/> <link rel="dns-prefetch" href="https://d.impactradius-event.com"/> <link rel="preconnect" href="https://d.impactradius-event.com"/> <link rel="dns-prefetch" href="https://js.monitor.azure.com"/> <link rel="preconnect" href="https://js.monitor.azure.com"/> <link rel="dns-prefetch" href="https://mem.gfx.ms"/> <link rel="preconnect" href="https://mem.gfx.ms"/> <link rel="dns-prefetch" href="https://wcpstatic.microsoft.com"/> <link rel="preconnect" href="https://wcpstatic.microsoft.com"/> <link rel="dns-prefetch" href="https://www.clarity.ms"/> <link rel="preconnect" href="https://www.clarity.ms"/> <link rel="dns-prefetch" href="https://fpt.microsoft.com"/> <link rel="preconnect" href="https://fpt.microsoft.com"/> <link rel="dns-prefetch" href="https://publisher.liveperson.net"/> <link rel="preconnect" href="https://publisher.liveperson.net"/> <link rel="dns-prefetch" href="https://accdn.lpsnmedia.net"/> <link rel="preconnect" href="https://accdn.lpsnmedia.net"/> <link rel="dns-prefetch" href="https://lpcdn.lpsnmedia.net"/> <link rel="preconnect" href="https://lpcdn.lpsnmedia.net"/> <link rel="dns-prefetch" href="https://lptag.liveperson.net"/> <link rel="preconnect" href="https://lptag.liveperson.net"/> <meta charset="UTF-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <meta http-equiv="x-ua-compatible" content="ie=edge"/>  <link rel="SHORTCUT ICON" href="/favicon.ico?v2" type="image/x-icon"/> <meta name="robots" content="index, follow"/> <meta name="template" content="single-layout-template"/> <meta name="awa-canvasType" content="web"/> <meta name="awa-isTented" content="false"/> <meta name="awa-pageType"/> <meta name="awa-pgtmp" content="single-layout-template"/> <meta name="awa-pageId" content="584804a5536a292ce4d50d7946b3fc82"/> <meta name="awa-market" content="en-us"/> <meta name="awa-cms" content="AEM"/> <meta name="awa-enabledFeatures" content="contentbackfillgenerate;esiproductcards;feature-controlled-mwf;uhf-ms-io-endpoint;uhf-esi-cv;uhf-esi-cache;fraud-greenid;contentsquare;mediapixel;holiday-themer;lazyload-static-components;clientlibDefer;upsellEnabled;contentbackfillpkgdelete;healthcheck;contentbackfillhttpgenerate;perf-tracker-1ds;dynamic-bundle;cvIncrementer;tentingEnabled;chatCookiesImplemented;alertCountDownWithoutServerTime;pdpDynamicRendering;bundlesDynamicRendering;contentbackfillmetadatachangesvideo;contentbackfillmetadatachangesnonvideo;listDynamicRendering;experimentation-without-personalization;generic-list-importer;combinedUHF;cvCallEnabled;m365ProductCatalog;support-unsupported-locales;deferClickTale;videoLazyLoad;prefetchFontsEnabled;enable-code-isolation;imageLinkTag;fetchPriority;contentIngestionAgent;enableClickgroupTelemetry;imageLazyLoad;contentIngestionAgent-dispatcher2westus2Agent;isCacheControlFeatureEnabled;feature-controlled-content-card;lcpPrioritizationPhase1;ocReimagineTelemetry;deferScriptsEnabled;lcpPrioritizationPhase2;ocReimagineSlotNumberTelemetry;contentIngestionAgent-dispatcher1westus2Agent;ocReimagineComponentNameTelemetry;ocReimagineTemplateNameTelemetry;ptePhase1;extended-html-minification-sites;dynamicPrice;gl-auto-config;displayV35Toggle;chatCustomEndpoint;enableBoostPersonalization;ocReimagineTelemetryTemplateNameSwap;enableEmailConnector;enable-eventingService;ocReimagineAIAssistant;acsPMEFeatureEnabled;ocReimagineCustomerApiUrl;ocReimagineCustomerFilterApiUrl"/> <meta name='thirdparty-config' content='v1'/> <meta name="format-detection" content="telephone=no"/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Bold/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semilight/latest.woff2" as="font" type="font/woff2" crossorigin/> <link rel="preload" href="https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2" as="font" type="font/woff2" crossorigin/> <title>Microsoft Security Servicing Criteria for Windows</title> <link rel="canonical" href="https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria"/> <meta name="twitter:url" content="https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria"/> <meta name="twitter:title" content="Microsoft Security Servicing Criteria for Windows"/> <meta name="twitter:card" content="summary"/> <meta property="og:url" content="https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria"/> <meta property="og:title" content="Microsoft Security Servicing Criteria for Windows"/> <meta property="og:type" content="website"/> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css" type="text/css"> <link rel="stylesheet" href="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHf747282a2831677a6cb1c9ca4fe2b8fe.css" type="text/css"> <link rel="stylesheet" href="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css" type="text/css"> <script id="ie11-polyfill-script"> var isModernBrowser = ( 'fetch' in window && 'assign' in Object ); if ( !isModernBrowser ) { var scriptElement = document.createElement('script'); scriptElement.async = false; scriptElement.src = '/alfa/etc.clientlibs/cascade.component.authoring/clientlib-polyfills/resources/ie11-polyfills.js'; var polyfillScriptElement = document.querySelector('#ie11-polyfill-script'); if (polyfillScriptElement) { polyfillScriptElement.parentNode.insertBefore(scriptElement, polyfillScriptElement.nextSibling); } } </script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js"></script> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js"></script> <script type="text/javascript"> var expToken = { "exp": { "target": { "propertyToken": "8c1e142d-c7db-a269-dc00-3656897ea8b0", "visitorJsHash": "30368a72d017e4133bfd3b5d073d06ff", "expJsHash": "895e2a12062f1ee44d7d72d266904bde", "isExpWithoutPersonalizationEnabled": ("false"==="true") } } }; window.cas = expToken; </script> <meta name="cas-exp-visitor" content="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.min.ACSHASH30368a72d017e4133bfd3b5d073d06ff.js"> <meta name="cas-exp-at" content="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/experimentation.min.ACSHASH895e2a12062f1ee44d7d72d266904bde.js"> <script type="text/javascript" src="/alfa/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHbe3f2a9f6a41fc40556efe260fc861a5.js" async></script> <meta name="exp-visitor-anchor" content=""/> <meta name="exp-atjs-anchor" content=""/>  <script src="/alfa/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js"></script> </template></head> <body class="page basicpage"> <span style="display:none"> <script> window.mscv = 'CASMicrosoft0000.0' </script> <script> window.msservercv = 'CASMicrosoftCV11e2066c.0' </script> This is the Trace Id: d8937fab56593683b55a01468902d11e <script> window.traceid = 'd8937fab56593683b55a01468902d11e' </script> </span> <script type="text/javascript"> window.msauthIsPublisher = true; </script> <span aria-hidden="true" class="d-none geo-info" data-continent="AS" data-country_code="SG" data-region_code="" data-city="SINGAPORE" data-timezone="GMT+8" data-zip="" data-county="" data-areacode=""> </span> <div id="page-top" tabindex="-1"></div> <div id="modalsRenderedAfterPageLoad"> </div> <div class="root responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="universalheader aem-GridColumn aem-GridColumn--default--12" data-component-id="cf9a86dceae618e01d6e6399d243873c"> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css" type="text/css">   <link rel="stylesheet" href="https://www.microsoft.com/onerfstatics/marketingsites-eas-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231" type="text/css" media="all" /> <div id="headerArea" class="uhf" data-m='{"cN":"headerArea","cT":"Area_coreuiArea","id":"a1Body","sN":1,"aN":"Body"}'> <div id="headerRegion" data-region-key="headerregion" data-m='{"cN":"headerRegion","cT":"Region_coreui-region","id":"r1a1","sN":1,"aN":"a1"}' > <div id="headerUniversalHeader" data-m='{"cN":"headerUniversalHeader","cT":"Module_coreui-universalheader","id":"m1r1a1","sN":1,"aN":"r1a1"}' data-module-id="Category|headerRegion|coreui-region|headerUniversalHeader|coreui-universalheader"> <div data-m='{"cN":"cookiebanner_cont","cT":"Container","id":"c1m1r1a1","sN":1,"aN":"m1r1a1"}'> <div id="uhfCookieAlert" data-locale="en-us"> <div id="msccBannerV2"></div> </div> </div> <a id="uhfSkipToMain" class="m-skip-to-main" href="javascript:void(0)" data-href="" tabindex="0" data-m='{"cN":"Skip to content_nonnav","id":"nn2m1r1a1","sN":2,"aN":"m1r1a1"}'>Skip to main content</a> <header class="c-uhfh context-uhf no-js c-sgl-stck c-category-header " itemscope="itemscope" data-header-footprint="/MSMSRC/MSMSRCHeader, fromService: True" data-magict="true" itemtype="http://schema.org/Organization"> <div class="theme-light js-global-head f-closed global-head-cont" data-m='{"cN":"Universal Header_cont","cT":"Container","id":"c3m1r1a1","sN":3,"aN":"m1r1a1"}'> <div class="c-uhfh-gcontainer-st"> <button type="button" class="c-action-trigger c-glyph glyph-global-nav-button" aria-label="All Microsoft expand to see list of Microsoft products and services" initialState-label="All Microsoft expand to see list of Microsoft products and services" toggleState-label="Close All Microsoft list" aria-expanded="false" data-m='{"cN":"Mobile menu button_nonnav","id":"nn1c3m1r1a1","sN":1,"aN":"c3m1r1a1"}'></button> <button type="button" class="c-action-trigger c-glyph glyph-arrow-htmllegacy c-close-search" aria-label="Close search" aria-expanded="false" data-m='{"cN":"Close Search_nonnav","id":"nn2c3m1r1a1","sN":2,"aN":"c3m1r1a1"}'></button> <a id="uhfLogo" class="c-logo c-sgl-stk-uhfLogo" itemprop="url" href="https://www.microsoft.com" aria-label="Microsoft" data-m='{"cN":"GlobalNav_Logo_cont","cT":"Container","id":"c3c3m1r1a1","sN":3,"aN":"c3m1r1a1"}'> <img alt="" itemprop="logo" class="c-image" src="https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31" role="presentation" aria-hidden="true" /> <span itemprop="name" role="presentation" aria-hidden="true">Microsoft</span> </a> <div class="f-mobile-title"> <button type="button" class="c-action-trigger c-glyph glyph-chevron-left" aria-label="See more menu options" data-m='{"cN":"Mobile back button_nonnav","id":"nn4c3m1r1a1","sN":4,"aN":"c3m1r1a1"}'></button> <span data-global-title="Microsoft home" class="js-mobile-title">MSRC</span> <button type="button" class="c-action-trigger c-glyph glyph-chevron-right" aria-label="See more menu options" data-m='{"cN":"Mobile forward button_nonnav","id":"nn5c3m1r1a1","sN":5,"aN":"c3m1r1a1"}'></button> </div> <div class="c-show-pipe x-hidden-vp-mobile-st"> <a id="uhfCatLogo" class="c-logo c-cat-logo" href="https://msrc.microsoft.com/" aria-label="MSRC" itemprop="url" data-m='{"cN":"CatNav_MSRC_nav","id":"n6c3m1r1a1","sN":6,"aN":"c3m1r1a1"}'> <span>MSRC</span> </a> </div> <div class="cat-logo-button-cont x-hidden"> <button type="button" id="uhfCatLogoButton" class="c-cat-logo-button x-hidden" aria-expanded="false" aria-label="MSRC" data-m='{"cN":"MSRC_nonnav","id":"nn7c3m1r1a1","sN":7,"aN":"c3m1r1a1"}'> MSRC </button> </div> <nav id="uhf-g-nav" aria-label="Contextual menu" class="c-uhfh-gnav" data-m='{"cN":"Category nav_cont","cT":"Container","id":"c8c3m1r1a1","sN":8,"aN":"c3m1r1a1"}'> <ul class="js-paddle-items"> <li class="single-link js-nav-menu x-hidden-none-mobile-vp uhf-menu-item"> <a class="c-uhf-nav-link" href="https://msrc.microsoft.com/" data-m='{"cN":"CatNav_Home_nav","id":"n1c8c3m1r1a1","sN":1,"aN":"c8c3m1r1a1"}' > Home </a> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="msmsrc-header-menulist-report-an-issue" aria-expanded="false" data-m='{"cN":"CatNav_msmsrc-header-menulist-report-an-issue_nonnav","id":"nn2c8c3m1r1a1","sN":2,"aN":"c8c3m1r1a1"}'>Report an issue</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"msmsrc-header-menulist-report-an-issue_cont","cT":"Container","id":"c3c8c3m1r1a1","sN":3,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-sbr_cont","cT":"Container","id":"c1c3c8c3m1r1a1","sN":1,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-sbr" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/vulnerability/new" data-m='{"cN":"CatNav_report-an-issue-submenuitem-sbr_nav","id":"n1c1c3c8c3m1r1a1","sN":1,"aN":"c1c3c8c3m1r1a1"}'>Report Security Vulnerability</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-cars_cont","cT":"Container","id":"c2c3c8c3m1r1a1","sN":2,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-cars" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/abuse" data-m='{"cN":"CatNav_report-an-issue-submenuitem-cars_nav","id":"n1c2c3c8c3m1r1a1","sN":1,"aN":"c2c3c8c3m1r1a1"}'>Report Abuse</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"report-an-issue-submenuitem-infringement_cont","cT":"Container","id":"c3c3c8c3m1r1a1","sN":3,"aN":"c3c8c3m1r1a1"}'> <a id="report-an-issue-submenuitem-infringement" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/report/infringement" data-m='{"cN":"CatNav_report-an-issue-submenuitem-infringement_nav","id":"n1c3c3c8c3m1r1a1","sN":1,"aN":"c3c3c8c3m1r1a1"}'>Report Infringement</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"submission-faqs_cont","cT":"Container","id":"c4c3c8c3m1r1a1","sN":4,"aN":"c3c8c3m1r1a1"}'> <a id="submission-faqs" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/faqs-report-an-issue" data-m='{"cN":"CatNav_submission-faqs_nav","id":"n1c4c3c8c3m1r1a1","sN":1,"aN":"c4c3c8c3m1r1a1"}'>Submission FAQs</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_5" aria-expanded="false" data-m='{"cN":"CatNav_Customer guidance_nonnav","id":"nn4c8c3m1r1a1","sN":4,"aN":"c8c3m1r1a1"}'>Customer guidance</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Customer guidance_cont","cT":"Container","id":"c5c8c3m1r1a1","sN":5,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Security Update Guide_cont","cT":"Container","id":"c1c5c8c3m1r1a1","sN":1,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_6" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide" data-m='{"cN":"CatNav_Security Update Guide_nav","id":"n1c1c5c8c3m1r1a1","sN":1,"aN":"c1c5c8c3m1r1a1"}'>Security Update Guide</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Exploitability index_cont","cT":"Container","id":"c2c5c8c3m1r1a1","sN":2,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_7" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/exploitability-index" data-m='{"cN":"CatNav_Exploitability index_nav","id":"n1c2c5c8c3m1r1a1","sN":1,"aN":"c2c5c8c3m1r1a1"}'>Exploitability index</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Developer API documentation_cont","cT":"Container","id":"c3c5c8c3m1r1a1","sN":3,"aN":"c5c8c3m1r1a1"}'> <a id="c-shellmenu_8" class="js-subm-uhf-nav-link" href="https://aka.ms/msrc-api-docs-cvrf" data-m='{"cN":"CatNav_Developer API documentation_nav","id":"n1c3c5c8c3m1r1a1","sN":1,"aN":"c3c5c8c3m1r1a1"}'>Developer API documentation</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Frequently Asked Questions_cont","cT":"Container","id":"c4c5c8c3m1r1a1","sN":4,"aN":"c5c8c3m1r1a1"}'> <a id="faqs-report-an-issue" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/msrc/faqs-security-update-guide" data-m='{"cN":"CatNav_Frequently Asked Questions_nav","id":"n1c4c5c8c3m1r1a1","sN":1,"aN":"c4c5c8c3m1r1a1"}'>Frequently Asked Questions</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Technical Security Notifications_cont","cT":"Container","id":"c5c5c8c3m1r1a1","sN":5,"aN":"c5c8c3m1r1a1"}'> <a id="Technical-Security-Notifications" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/technical-security-notifications" data-m='{"cN":"CatNav_Technical Security Notifications_nav","id":"n1c5c5c8c3m1r1a1","sN":1,"aN":"c5c5c8c3m1r1a1"}'>Technical Security Notifications</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_11" aria-expanded="false" data-m='{"cN":"CatNav_engage_nonnav","id":"nn6c8c3m1r1a1","sN":6,"aN":"c8c3m1r1a1"}'>Engage</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"engage_cont","cT":"Container","id":"c7c8c3m1r1a1","sN":7,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Bug Bounty Programs_cont","cT":"Container","id":"c1c7c8c3m1r1a1","sN":1,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_12" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/bounty" data-m='{"cN":"CatNav_Microsoft Bug Bounty Programs_nav","id":"n1c1c7c8c3m1r1a1","sN":1,"aN":"c1c7c8c3m1r1a1"}'>Microsoft Bug Bounty Programs</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Active Protections Program_cont","cT":"Container","id":"c2c7c8c3m1r1a1","sN":2,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_13" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/mapp" data-m='{"cN":"CatNav_Microsoft Active Protections Program_nav","id":"n1c2c7c8c3m1r1a1","sN":1,"aN":"c2c7c8c3m1r1a1"}'>Microsoft Active Protections Program</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"BlueHat Security Conference_cont","cT":"Container","id":"c3c7c8c3m1r1a1","sN":3,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_14" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/bluehat/" data-m='{"cN":"CatNav_BlueHat Security Conference_nav","id":"n1c3c7c8c3m1r1a1","sN":1,"aN":"c3c7c8c3m1r1a1"}'>BlueHat Security Conference</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Researcher Recognition Program_cont","cT":"Container","id":"c4c7c8c3m1r1a1","sN":4,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_15" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/researcher-recognition-program" data-m='{"cN":"CatNav_Researcher Recognition Program_nav","id":"n1c4c7c8c3m1r1a1","sN":1,"aN":"c4c7c8c3m1r1a1"}'>Researcher Recognition Program</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Windows Security Servicing Criteria_cont","cT":"Container","id":"c5c7c8c3m1r1a1","sN":5,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_16" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/windows-security-servicing-criteria" data-m='{"cN":"CatNav_Windows Security Servicing Criteria_nav","id":"n1c5c7c8c3m1r1a1","sN":1,"aN":"c5c7c8c3m1r1a1"}'>Windows Security Servicing Criteria</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Researcher Resource Center_cont","cT":"Container","id":"c6c7c8c3m1r1a1","sN":6,"aN":"c7c8c3m1r1a1"}'> <a id="c-shellmenu_17" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/msrc/msrc-researcher-resource-center" data-m='{"cN":"CatNav_Researcher Resource Center_nav","id":"n1c6c7c8c3m1r1a1","sN":1,"aN":"c6c7c8c3m1r1a1"}'>Researcher Resource Center</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="who-we-are" aria-expanded="false" data-m='{"cN":"CatNav_who-we-are_nonnav","id":"nn8c8c3m1r1a1","sN":8,"aN":"c8c3m1r1a1"}'>Who we are</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"who-we-are_cont","cT":"Container","id":"c9c8c3m1r1a1","sN":9,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"mission_cont","cT":"Container","id":"c1c9c8c3m1r1a1","sN":1,"aN":"c9c8c3m1r1a1"}'> <a id="mission" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/mission" data-m='{"cN":"CatNav_mission_nav","id":"n1c1c9c8c3m1r1a1","sN":1,"aN":"c1c9c8c3m1r1a1"}'>Mission</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"cdoc_cont","cT":"Container","id":"c2c9c8c3m1r1a1","sN":2,"aN":"c9c8c3m1r1a1"}'> <a id="cdoc" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/cdoc" data-m='{"cN":"CatNav_cdoc_nav","id":"n1c2c9c8c3m1r1a1","sN":1,"aN":"c2c9c8c3m1r1a1"}'>Cyber Defense Operations Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"cvd_cont","cT":"Container","id":"c3c9c8c3m1r1a1","sN":3,"aN":"c9c8c3m1r1a1"}'> <a id="cvd" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/cvd" data-m='{"cN":"CatNav_cvd_nav","id":"n1c3c9c8c3m1r1a1","sN":1,"aN":"c3c9c8c3m1r1a1"}'>Coordinated Vulnerability Disclosure</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"social_cont","cT":"Container","id":"c4c9c8c3m1r1a1","sN":4,"aN":"c9c8c3m1r1a1"}'> <a id="social" class="js-subm-uhf-nav-link" href="https://microsoft.com/msrc/social" data-m='{"cN":"CatNav_social_nav","id":"n1c4c9c8c3m1r1a1","sN":1,"aN":"c4c9c8c3m1r1a1"}'>Social</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="c-shellmenu_23" aria-expanded="false" data-m='{"cN":"CatNav_Blogs_nonnav","id":"nn10c8c3m1r1a1","sN":10,"aN":"c8c3m1r1a1"}'>Blogs</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Blogs_cont","cT":"Container","id":"c11c8c3m1r1a1","sN":11,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft Security Response Center_cont","cT":"Container","id":"c1c11c8c3m1r1a1","sN":1,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_24" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-msrc" data-m='{"cN":"CatNav_Microsoft Security Response Center_nav","id":"n1c1c11c8c3m1r1a1","sN":1,"aN":"c1c11c8c3m1r1a1"}'>Microsoft Security Response Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Security Research \u0026 Defense_cont","cT":"Container","id":"c2c11c8c3m1r1a1","sN":2,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_25" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-srd" data-m='{"cN":"CatNav_Security Research \u0026 Defense_nav","id":"n1c2c11c8c3m1r1a1","sN":1,"aN":"c2c11c8c3m1r1a1"}'>Security Research & Defense</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"BlueHat Conference Blog_cont","cT":"Container","id":"c3c11c8c3m1r1a1","sN":3,"aN":"c11c8c3m1r1a1"}'> <a id="c-shellmenu_26" class="js-subm-uhf-nav-link" href="https://aka.ms/blog-bluehat" data-m='{"cN":"CatNav_BlueHat Conference Blog_nav","id":"n1c3c11c8c3m1r1a1","sN":1,"aN":"c3c11c8c3m1r1a1"}'>BlueHat Conference Blog</a> </li> </ul> </div> </li> <li class="nested-menu uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button type="button" id="Acknowledgments" aria-expanded="false" data-m='{"cN":"CatNav_Acknowledgments_nonnav","id":"nn12c8c3m1r1a1","sN":12,"aN":"c8c3m1r1a1"}'>Acknowledgments</button> <ul class="" data-class-idn="" aria-hidden="true" data-m='{"cN":"Acknowledgments_cont","cT":"Container","id":"c13c8c3m1r1a1","sN":13,"aN":"c8c3m1r1a1"}'> <li class="js-nav-menu single-link" data-m='{"cN":"Security Researcher Acknowledgments_cont","cT":"Container","id":"c1c13c8c3m1r1a1","sN":1,"aN":"c13c8c3m1r1a1"}'> <a id="security-researcher-acknowledgments" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide/acknowledgment" data-m='{"cN":"CatNav_Security Researcher Acknowledgments_nav","id":"n1c1c13c8c3m1r1a1","sN":1,"aN":"c1c13c8c3m1r1a1"}'>Security Researcher Acknowledgments</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Online Services Researcher Acknowledgments_cont","cT":"Container","id":"c2c13c8c3m1r1a1","sN":2,"aN":"c13c8c3m1r1a1"}'> <a id="online-services-acknowledgments" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/update-guide/acknowledgement/online" data-m='{"cN":"CatNav_Online Services Researcher Acknowledgments_nav","id":"n1c2c13c8c3m1r1a1","sN":1,"aN":"c2c13c8c3m1r1a1"}'>Online Services Researcher Acknowledgments</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"leaderboard_cont","cT":"Container","id":"c3c13c8c3m1r1a1","sN":3,"aN":"c13c8c3m1r1a1"}'> <a id="c-shellmenu_30" class="js-subm-uhf-nav-link" href="https://msrc.microsoft.com/leaderboard" data-m='{"cN":"CatNav_leaderboard_nav","id":"n1c3c13c8c3m1r1a1","sN":1,"aN":"c3c13c8c3m1r1a1"}'>Security Researcher Leaderboard</a> </li> </ul> </div> </li> <li id="overflow-menu" class="overflow-menu x-hidden uhf-menu-item"> <div class="c-uhf-menu js-nav-menu"> <button data-m='{"pid":"More","id":"nn14c8c3m1r1a1","sN":14,"aN":"c8c3m1r1a1"}' type="button" aria-label="More" aria-expanded="false">More</button> <ul id="overflow-menu-list" aria-hidden="true" class="overflow-menu-list"> </ul> </div> </li> </ul> </nav> <div class="c-uhfh-actions" data-m='{"cN":"Header actions_cont","cT":"Container","id":"c9c3m1r1a1","sN":9,"aN":"c3m1r1a1"}'> <div class="wf-menu"> <nav id="uhf-c-nav" aria-label="All Microsoft menu" data-m='{"cN":"GlobalNav_cont","cT":"Container","id":"c1c9c3m1r1a1","sN":1,"aN":"c9c3m1r1a1"}'> <ul class="js-paddle-items"> <li> <div class="c-uhf-menu js-nav-menu"> <button type="button" class="c-button-logo all-ms-nav" aria-expanded="false" data-m='{"cN":"GlobalNav_More_nonnav","id":"nn1c1c9c3m1r1a1","sN":1,"aN":"c1c9c3m1r1a1"}'> <span>All Microsoft</span></button> <ul class="f-multi-column f-multi-column-6" aria-hidden="true" data-m='{"cN":"More_cont","cT":"Container","id":"c2c1c9c3m1r1a1","sN":2,"aN":"c1c9c3m1r1a1"}'> <li class="c-w0-contr"> <h2 class="c-uhf-sronly">Global</h2> <ul class="c-w0"> <li class="js-nav-menu single-link" data-m='{"cN":"M365_cont","cT":"Container","id":"c1c2c1c9c3m1r1a1","sN":1,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_31" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/microsoft-365" data-m='{"cN":"W0Nav_M365_nav","id":"n1c1c2c1c9c3m1r1a1","sN":1,"aN":"c1c2c1c9c3m1r1a1"}'>Microsoft 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Teams_cont","cT":"Container","id":"c2c2c1c9c3m1r1a1","sN":2,"aN":"c2c1c9c3m1r1a1"}'> <a id="l0_Teams" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"W0Nav_Teams_nav","id":"n1c2c2c1c9c3m1r1a1","sN":1,"aN":"c2c2c1c9c3m1r1a1"}'>Teams</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Copilot_cont","cT":"Container","id":"c3c2c1c9c3m1r1a1","sN":3,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_33" class="js-subm-uhf-nav-link" href="https://copilot.microsoft.com/" data-m='{"cN":"W0Nav_Copilot_nav","id":"n1c3c2c1c9c3m1r1a1","sN":1,"aN":"c3c2c1c9c3m1r1a1"}'>Copilot</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Windows_cont","cT":"Container","id":"c4c2c1c9c3m1r1a1","sN":4,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_34" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/windows/" data-m='{"cN":"W0Nav_Windows_nav","id":"n1c4c2c1c9c3m1r1a1","sN":1,"aN":"c4c2c1c9c3m1r1a1"}'>Windows</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Surface_cont","cT":"Container","id":"c5c2c1c9c3m1r1a1","sN":5,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_35" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/surface" data-m='{"cN":"W0Nav_Surface_nav","id":"n1c5c2c1c9c3m1r1a1","sN":1,"aN":"c5c2c1c9c3m1r1a1"}'>Surface</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Xbox_cont","cT":"Container","id":"c6c2c1c9c3m1r1a1","sN":6,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_36" class="js-subm-uhf-nav-link" href="https://www.xbox.com/" data-m='{"cN":"W0Nav_Xbox_nav","id":"n1c6c2c1c9c3m1r1a1","sN":1,"aN":"c6c2c1c9c3m1r1a1"}'>Xbox</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Deals_cont","cT":"Container","id":"c7c2c1c9c3m1r1a1","sN":7,"aN":"c2c1c9c3m1r1a1"}'> <a id="shellmenu_37" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/sale?icid=gm_nav_L0_salepage" data-m='{"cN":"W0Nav_Deals_nav","id":"n1c7c2c1c9c3m1r1a1","sN":1,"aN":"c7c2c1c9c3m1r1a1"}'>Deals</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Small Business_cont","cT":"Container","id":"c8c2c1c9c3m1r1a1","sN":8,"aN":"c2c1c9c3m1r1a1"}'> <a id="l0_SmallBusiness" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/business" data-m='{"cN":"W0Nav_Small Business_nav","id":"n1c8c2c1c9c3m1r1a1","sN":1,"aN":"c8c2c1c9c3m1r1a1"}'>Small Business</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"Support_cont","cT":"Container","id":"c9c2c1c9c3m1r1a1","sN":9,"aN":"c2c1c9c3m1r1a1"}'> <a id="l1_support" class="js-subm-uhf-nav-link" href="https://support.microsoft.com/en-us" data-m='{"cN":"W0Nav_Support_nav","id":"n1c9c2c1c9c3m1r1a1","sN":1,"aN":"c9c2c1c9c3m1r1a1"}'>Support</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c10c2c1c9c3m1r1a1","sN":10,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_41-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c10c2c1c9c3m1r1a1","sN":1,"aN":"c10c2c1c9c3m1r1a1"}'>Software</span> <button id="uhf-navbtn-shellmenu_41-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c10c2c1c9c3m1r1a1","sN":2,"aN":"c10c2c1c9c3m1r1a1"}'>Software</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_41-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_WindowsApps_cont","cT":"Container","id":"c3c10c2c1c9c3m1r1a1","sN":3,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_42" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/apps/windows?icid=CNavAppsWindowsApps" data-m='{"cN":"GlobalNav_More_Software_WindowsApps_nav","id":"n1c3c10c2c1c9c3m1r1a1","sN":1,"aN":"c3c10c2c1c9c3m1r1a1"}'>Windows Apps</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_AI_cont","cT":"Container","id":"c4c10c2c1c9c3m1r1a1","sN":4,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_43" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/ai" data-m='{"cN":"GlobalNav_More_Software_AI_nav","id":"n1c4c10c2c1c9c3m1r1a1","sN":1,"aN":"c4c10c2c1c9c3m1r1a1"}'>AI</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Outlook_cont","cT":"Container","id":"c5c10c2c1c9c3m1r1a1","sN":5,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_44" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook" data-m='{"cN":"GlobalNav_More_Software_Outlook_nav","id":"n1c5c10c2c1c9c3m1r1a1","sN":1,"aN":"c5c10c2c1c9c3m1r1a1"}'>Outlook</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_OneDrive_cont","cT":"Container","id":"c6c10c2c1c9c3m1r1a1","sN":6,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_45" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/onedrive/online-cloud-storage" data-m='{"cN":"GlobalNav_More_Software_OneDrive_nav","id":"n1c6c10c2c1c9c3m1r1a1","sN":1,"aN":"c6c10c2c1c9c3m1r1a1"}'>OneDrive</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Microsoft Teams_cont","cT":"Container","id":"c7c10c2c1c9c3m1r1a1","sN":7,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_46" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"GlobalNav_More_Software_Microsoft Teams_nav","id":"n1c7c10c2c1c9c3m1r1a1","sN":1,"aN":"c7c10c2c1c9c3m1r1a1"}'>Microsoft Teams</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_OneNote_cont","cT":"Container","id":"c8c10c2c1c9c3m1r1a1","sN":8,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_47" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/onenote/digital-note-taking-app" data-m='{"cN":"GlobalNav_More_Software_OneNote_nav","id":"n1c8c10c2c1c9c3m1r1a1","sN":1,"aN":"c8c10c2c1c9c3m1r1a1"}'>OneNote</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Edge_cont","cT":"Container","id":"c9c10c2c1c9c3m1r1a1","sN":9,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_48" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/edge" data-m='{"cN":"GlobalNav_More_Software_Edge_nav","id":"n1c9c10c2c1c9c3m1r1a1","sN":1,"aN":"c9c10c2c1c9c3m1r1a1"}'>Microsoft Edge</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Software_Skype_cont","cT":"Container","id":"c10c10c2c1c9c3m1r1a1","sN":10,"aN":"c10c2c1c9c3m1r1a1"}'> <a id="shellmenu_49" class="js-subm-uhf-nav-link" href="https://www.skype.com/en/" data-m='{"cN":"GlobalNav_More_Software_Skype_nav","id":"n1c10c10c2c1c9c3m1r1a1","sN":1,"aN":"c10c10c2c1c9c3m1r1a1"}'>Skype</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cN":"PCsAndDevices_cont","cT":"Container","id":"c11c2c1c9c3m1r1a1","sN":11,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_50-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"cN":"GlobalNav_PCsAndDevices_nonnav","id":"nn1c11c2c1c9c3m1r1a1","sN":1,"aN":"c11c2c1c9c3m1r1a1"}'>PCs & Devices </span> <button id="uhf-navbtn-shellmenu_50-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"cN":"GlobalNav_PCsAndDevices_nonnav","id":"nn2c11c2c1c9c3m1r1a1","sN":2,"aN":"c11c2c1c9c3m1r1a1"}'>PCs & Devices </button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_50-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_PCsAndTablets_cont","cT":"Container","id":"c3c11c2c1c9c3m1r1a1","sN":3,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_51" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/pc?icid=CNavDevicesPC" data-m='{"cN":"GlobalNav_More_PCsAndDevices_PCsAndTablets_nav","id":"n1c3c11c2c1c9c3m1r1a1","sN":1,"aN":"c3c11c2c1c9c3m1r1a1"}'>Computers</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_ShopXbox_cont","cT":"Container","id":"c4c11c2c1c9c3m1r1a1","sN":4,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_52" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/xbox?icid=CNavDevicesXbox" data-m='{"cN":"GlobalNav_More_PCsAndDevices_ShopXbox_nav","id":"n1c4c11c2c1c9c3m1r1a1","sN":1,"aN":"c4c11c2c1c9c3m1r1a1"}'>Shop Xbox</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_Accessories_cont","cT":"Container","id":"c5c11c2c1c9c3m1r1a1","sN":5,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_53" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/accessories?icid=CNavDevicesAccessories" data-m='{"cN":"GlobalNav_More_PCsAndDevices_Accessories_nav","id":"n1c5c11c2c1c9c3m1r1a1","sN":1,"aN":"c5c11c2c1c9c3m1r1a1"}'>Accessories</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_VMAndMixedReality_cont","cT":"Container","id":"c6c11c2c1c9c3m1r1a1","sN":6,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_54" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/virtualreality?icid=CNavVirtualReality" data-m='{"cN":"GlobalNav_More_PCsAndDevices_VMAndMixedReality_nav","id":"n1c6c11c2c1c9c3m1r1a1","sN":1,"aN":"c6c11c2c1c9c3m1r1a1"}'>VR & mixed reality</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevicesCertifiedRefurbished_cont","cT":"Container","id":"c7c11c2c1c9c3m1r1a1","sN":7,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_55" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/certified-refurbished-products" data-m='{"cN":"GlobalNav_More_PCsAndDevicesCertifiedRefurbished_nav","id":"n1c7c11c2c1c9c3m1r1a1","sN":1,"aN":"c7c11c2c1c9c3m1r1a1"}'>Certified Refurbished</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_PCsAndDevices_Trade-in-for-cash_cont","cT":"Container","id":"c8c11c2c1c9c3m1r1a1","sN":8,"aN":"c11c2c1c9c3m1r1a1"}'> <a id="shellmenu_56" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/microsoft-trade-in" data-m='{"cN":"GlobalNav_More_PCsAndDevices_Trade-in-for-cash_nav","id":"n1c8c11c2c1c9c3m1r1a1","sN":1,"aN":"c8c11c2c1c9c3m1r1a1"}'>Trade-in for cash</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c12c2c1c9c3m1r1a1","sN":12,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_57-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c12c2c1c9c3m1r1a1","sN":1,"aN":"c12c2c1c9c3m1r1a1"}'>Entertainment</span> <button id="uhf-navbtn-shellmenu_57-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c12c2c1c9c3m1r1a1","sN":2,"aN":"c12c2c1c9c3m1r1a1"}'>Entertainment</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_57-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_XboxGamePassUltimate_cont","cT":"Container","id":"c3c12c2c1c9c3m1r1a1","sN":3,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_58" class="js-subm-uhf-nav-link" href="https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePassUltimate" data-m='{"cN":"GlobalNav_More_Entertainment_XboxGamePassUltimate_nav","id":"n1c3c12c2c1c9c3m1r1a1","sN":1,"aN":"c3c12c2c1c9c3m1r1a1"}'>Xbox Game Pass Ultimate</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_PC_Game_Pass_cont","cT":"Container","id":"c4c12c2c1c9c3m1r1a1","sN":4,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_59" class="js-subm-uhf-nav-link" href="https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass" data-m='{"cN":"GlobalNav_More_Entertainment_PC_Game_Pass_nav","id":"n1c4c12c2c1c9c3m1r1a1","sN":1,"aN":"c4c12c2c1c9c3m1r1a1"}'>PC Game Pass</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_XboxGames_cont","cT":"Container","id":"c5c12c2c1c9c3m1r1a1","sN":5,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_60" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/xboxgames?icid=CNavGamesXboxGames" data-m='{"cN":"GlobalNav_More_Entertainment_XboxGames_nav","id":"n1c5c12c2c1c9c3m1r1a1","sN":1,"aN":"c5c12c2c1c9c3m1r1a1"}'>Xbox games</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_PCGames_cont","cT":"Container","id":"c6c12c2c1c9c3m1r1a1","sN":6,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_61" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/games/windows?icid=CNavGamesWindowsGames" data-m='{"cN":"GlobalNav_More_Entertainment_PCGames_nav","id":"n1c6c12c2c1c9c3m1r1a1","sN":1,"aN":"c6c12c2c1c9c3m1r1a1"}'>PC and Windows games</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Entertainment_MoviesAndTV_cont","cT":"Container","id":"c7c12c2c1c9c3m1r1a1","sN":7,"aN":"c12c2c1c9c3m1r1a1"}'> <a id="shellmenu_62" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/movies-and-tv?icid=TopNavMoviesTv" data-m='{"cN":"GlobalNav_More_Entertainment_MoviesAndTV_nav","id":"n1c7c12c2c1c9c3m1r1a1","sN":1,"aN":"c7c12c2c1c9c3m1r1a1"}'>Movies & TV</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c13c2c1c9c3m1r1a1","sN":13,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_63-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c13c2c1c9c3m1r1a1","sN":1,"aN":"c13c2c1c9c3m1r1a1"}'>Business</span> <button id="uhf-navbtn-shellmenu_63-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c13c2c1c9c3m1r1a1","sN":2,"aN":"c13c2c1c9c3m1r1a1"}'>Business</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_63-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft_Cloud_cont","cT":"Container","id":"c3c13c2c1c9c3m1r1a1","sN":3,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_64" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-cloud" data-m='{"cN":"GlobalNav_More_Business_Microsoft_Cloud_nav","id":"n1c3c13c2c1c9c3m1r1a1","sN":1,"aN":"c3c13c2c1c9c3m1r1a1"}'>Microsoft Cloud</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft Security_cont","cT":"Container","id":"c4c13c2c1c9c3m1r1a1","sN":4,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_65" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/security" data-m='{"cN":"GlobalNav_More_Business_Microsoft Security_nav","id":"n1c4c13c2c1c9c3m1r1a1","sN":1,"aN":"c4c13c2c1c9c3m1r1a1"}'>Microsoft Security</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftDynamics365_cont","cT":"Container","id":"c5c13c2c1c9c3m1r1a1","sN":5,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_66" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/dynamics-365" data-m='{"cN":"GlobalNav_More_Business_MicrosoftDynamics365_nav","id":"n1c5c13c2c1c9c3m1r1a1","sN":1,"aN":"c5c13c2c1c9c3m1r1a1"}'>Dynamics 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Microsoft365forbusiness_cont","cT":"Container","id":"c6c13c2c1c9c3m1r1a1","sN":6,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_67" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/business" data-m='{"cN":"GlobalNav_More_Business_Microsoft365forbusiness_nav","id":"n1c6c13c2c1c9c3m1r1a1","sN":1,"aN":"c6c13c2c1c9c3m1r1a1"}'>Microsoft 365 for business</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftPowerPlatform_cont","cT":"Container","id":"c7c13c2c1c9c3m1r1a1","sN":7,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_68" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/power-platform" data-m='{"cN":"GlobalNav_More_Business_MicrosoftPowerPlatform_nav","id":"n1c7c13c2c1c9c3m1r1a1","sN":1,"aN":"c7c13c2c1c9c3m1r1a1"}'>Microsoft Power Platform</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_Windows365_cont","cT":"Container","id":"c8c13c2c1c9c3m1r1a1","sN":8,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_69" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/windows-365" data-m='{"cN":"GlobalNav_More_Business_Windows365_nav","id":"n1c8c13c2c1c9c3m1r1a1","sN":1,"aN":"c8c13c2c1c9c3m1r1a1"}'>Windows 365</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_MicrosoftIndustry_cont","cT":"Container","id":"c9c13c2c1c9c3m1r1a1","sN":9,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_70" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/industry" data-m='{"cN":"GlobalNav_More_Business_MicrosoftIndustry_nav","id":"n1c9c13c2c1c9c3m1r1a1","sN":1,"aN":"c9c13c2c1c9c3m1r1a1"}'>Microsoft Industry</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Business_SmallBusiness_cont","cT":"Container","id":"c10c13c2c1c9c3m1r1a1","sN":10,"aN":"c13c2c1c9c3m1r1a1"}'> <a id="shellmenu_71" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/business?icid=CNavBusinessStore" data-m='{"cN":"GlobalNav_More_Business_SmallBusiness_nav","id":"n1c10c13c2c1c9c3m1r1a1","sN":1,"aN":"c10c13c2c1c9c3m1r1a1"}'>Small Business</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c14c2c1c9c3m1r1a1","sN":14,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_72-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c14c2c1c9c3m1r1a1","sN":1,"aN":"c14c2c1c9c3m1r1a1"}'>Developer & IT </span> <button id="uhf-navbtn-shellmenu_72-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c14c2c1c9c3m1r1a1","sN":2,"aN":"c14c2c1c9c3m1r1a1"}'>Developer & IT </button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_72-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_Azure_cont","cT":"Container","id":"c3c14c2c1c9c3m1r1a1","sN":3,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_73" class="js-subm-uhf-nav-link" href="https://azure.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_Azure_nav","id":"n1c3c14c2c1c9c3m1r1a1","sN":1,"aN":"c3c14c2c1c9c3m1r1a1"}'>Azure</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_DeveloperCenter_cont","cT":"Container","id":"c4c14c2c1c9c3m1r1a1","sN":4,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_74" class="js-subm-uhf-nav-link" href="https://developer.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_DeveloperCenter_nav","id":"n1c4c14c2c1c9c3m1r1a1","sN":1,"aN":"c4c14c2c1c9c3m1r1a1"}'>Developer Center</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_Documentation_cont","cT":"Container","id":"c5c14c2c1c9c3m1r1a1","sN":5,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_75" class="js-subm-uhf-nav-link" href="https://learn.microsoft.com/docs/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_Documentation_nav","id":"n1c5c14c2c1c9c3m1r1a1","sN":1,"aN":"c5c14c2c1c9c3m1r1a1"}'>Documentation</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_MicrosoftLearn_cont","cT":"Container","id":"c6c14c2c1c9c3m1r1a1","sN":6,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_76" class="js-subm-uhf-nav-link" href="https://learn.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_MicrosoftLearn_nav","id":"n1c6c14c2c1c9c3m1r1a1","sN":1,"aN":"c6c14c2c1c9c3m1r1a1"}'>Microsoft Learn</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_MicrosoftTechCommunity_cont","cT":"Container","id":"c7c14c2c1c9c3m1r1a1","sN":7,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_77" class="js-subm-uhf-nav-link" href="https://techcommunity.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_MicrosoftTechCommunity_nav","id":"n1c7c14c2c1c9c3m1r1a1","sN":1,"aN":"c7c14c2c1c9c3m1r1a1"}'>Microsoft Tech Community</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_AzureMarketplace_cont","cT":"Container","id":"c8c14c2c1c9c3m1r1a1","sN":8,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_78" class="js-subm-uhf-nav-link" href="https://azuremarketplace.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_AzureMarketplace_nav","id":"n1c8c14c2c1c9c3m1r1a1","sN":1,"aN":"c8c14c2c1c9c3m1r1a1"}'>Azure Marketplace</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_AppSource_cont","cT":"Container","id":"c9c14c2c1c9c3m1r1a1","sN":9,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_79" class="js-subm-uhf-nav-link" href="https://appsource.microsoft.com/en-us/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_AppSource_nav","id":"n1c9c14c2c1c9c3m1r1a1","sN":1,"aN":"c9c14c2c1c9c3m1r1a1"}'>AppSource</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_DeveloperAndIT_VisualStudio_cont","cT":"Container","id":"c10c14c2c1c9c3m1r1a1","sN":10,"aN":"c14c2c1c9c3m1r1a1"}'> <a id="shellmenu_80" class="js-subm-uhf-nav-link" href="https://visualstudio.microsoft.com/" data-m='{"cN":"GlobalNav_More_DeveloperAndIT_VisualStudio_nav","id":"n1c10c14c2c1c9c3m1r1a1","sN":1,"aN":"c10c14c2c1c9c3m1r1a1"}'>Visual Studio</a> </li> </ul> </li> <li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cT":"Container","id":"c15c2c1c9c3m1r1a1","sN":15,"aN":"c2c1c9c3m1r1a1"}'> <span id="uhf-navspn-shellmenu_81-span" style="display:none" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn1c15c2c1c9c3m1r1a1","sN":1,"aN":"c15c2c1c9c3m1r1a1"}'>Other</span> <button id="uhf-navbtn-shellmenu_81-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"id":"nn2c15c2c1c9c3m1r1a1","sN":2,"aN":"c15c2c1c9c3m1r1a1"}'>Other</button> <ul aria-hidden="true" aria-labelledby="uhf-navspn-shellmenu_81-span"> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Microsoft Rewards_cont","cT":"Container","id":"c3c15c2c1c9c3m1r1a1","sN":3,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_82" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/rewards" data-m='{"cN":"GlobalNav_More_Other_Microsoft Rewards_nav","id":"n1c3c15c2c1c9c3m1r1a1","sN":1,"aN":"c3c15c2c1c9c3m1r1a1"}'>Microsoft Rewards </a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_FreeDownloadsAndSecurity_cont","cT":"Container","id":"c4c15c2c1c9c3m1r1a1","sN":4,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_83" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/download" data-m='{"cN":"GlobalNav_More_Other_FreeDownloadsAndSecurity_nav","id":"n1c4c15c2c1c9c3m1r1a1","sN":1,"aN":"c4c15c2c1c9c3m1r1a1"}'>Free downloads & security</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Education_cont","cT":"Container","id":"c5c15c2c1c9c3m1r1a1","sN":5,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_84" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/education" data-m='{"cN":"GlobalNav_More_Other_Education_nav","id":"n1c5c15c2c1c9c3m1r1a1","sN":1,"aN":"c5c15c2c1c9c3m1r1a1"}'>Education</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_GiftCards_cont","cT":"Container","id":"c6c15c2c1c9c3m1r1a1","sN":6,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_85" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/gift-cards" data-m='{"cN":"GlobalNav_More_Other_GiftCards_nav","id":"n1c6c15c2c1c9c3m1r1a1","sN":1,"aN":"c6c15c2c1c9c3m1r1a1"}'>Gift cards</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Licensing_cont","cT":"Container","id":"c7c15c2c1c9c3m1r1a1","sN":7,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="Licensing" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/licensing/" data-m='{"cN":"GlobalNav_More_Other_Licensing_nav","id":"n1c7c15c2c1c9c3m1r1a1","sN":1,"aN":"c7c15c2c1c9c3m1r1a1"}'>Licensing</a> </li> <li class="js-nav-menu single-link" data-m='{"cN":"More_Other_Unlocked_stories_cont","cT":"Container","id":"c8c15c2c1c9c3m1r1a1","sN":8,"aN":"c15c2c1c9c3m1r1a1"}'> <a id="shellmenu_87" class="js-subm-uhf-nav-link" href="https://unlocked.microsoft.com/" data-m='{"cN":"GlobalNav_More_Other_Unlocked_stories_nav","id":"n1c8c15c2c1c9c3m1r1a1","sN":1,"aN":"c8c15c2c1c9c3m1r1a1"}'>Unlocked stories</a> </li> </ul> </li> <li class="f-multi-column-info"> <a data-m='{"id":"n16c2c1c9c3m1r1a1","sN":16,"aN":"c2c1c9c3m1r1a1"}' href="https://www.microsoft.com/en-us/sitemap" aria-label="" class="c-glyph">View Sitemap</a> </li> </ul> </div> </li> </ul> </nav> </div> <form class="c-search" autocomplete="off" id="searchForm" name="searchForm" role="search" action="https://www.microsoft.com/en-us/search/explore" method="GET" data-seAutoSuggest='{"queryParams":{"market":"en-us","clientId":"7F27B536-CF6B-4C65-8638-A0F8CBDFCA65","sources":"Iris-Products,DCatAll-Products,Microsoft-Terms","filter":"+ClientType:StoreWeb","counts":"1,5,5"},"familyNames":{"Apps":"App","Books":"Book","Bundles":"Bundle","Devices":"Device","Fees":"Fee","Games":"Game","MusicAlbums":"Album","MusicTracks":"Song","MusicVideos":"Video","MusicArtists":"Artist","OperatingSystem":"Operating System","Software":"Software","Movies":"Movie","TV":"TV","CSV":"Gift Card","VideoActor":"Actor"}}' data-seautosuggestapi="https://www.microsoft.com/msstoreapiprod/api/autosuggest" data-m='{"cN":"GlobalNav_Search_cont","cT":"Container","id":"c3c1c9c3m1r1a1","sN":3,"aN":"c1c9c3m1r1a1"}' aria-expanded="false"> <input id="cli_shellHeaderSearchInput" aria-label="Search Expanded" aria-autocomplete="list" aria-expanded="false" aria-controls="universal-header-search-auto-suggest-transparent" aria-owns="universal-header-search-auto-suggest-ul" type="search" name="q" role="combobox" placeholder="Search Microsoft.com" data-m='{"cN":"SearchBox_nav","id":"n1c3c1c9c3m1r1a1","sN":1,"aN":"c3c1c9c3m1r1a1"}' data-toggle="tooltip" data-placement="right" title="Search Microsoft.com" /> <button id="search" aria-label="Search Microsoft.com" class="c-glyph" data-m='{"cN":"Search_nav","id":"n2c3c1c9c3m1r1a1","sN":2,"aN":"c3c1c9c3m1r1a1"}' data-bi-mto="true" aria-expanded="false" disabled="disabled"> <span role="presentation">Search</span> <span role="tooltip" class="c-uhf-tooltip c-uhf-search-tooltip">Search Microsoft.com</span> </button> <div class="m-auto-suggest" id="universal-header-search-auto-suggest-transparent" role="group"> <ul class="c-menu" id="universal-header-search-auto-suggest-ul" aria-label="Search Suggestions" aria-hidden="true" data-bi-dnt="true" data-bi-mto="true" data-js-auto-suggest-position="default" role="listbox" data-tel="jsll" data-m='{"cN":"search suggestions_cont","cT":"Container","id":"c3c3c1c9c3m1r1a1","sN":3,"aN":"c3c1c9c3m1r1a1"}'></ul> <ul class="c-menu f-auto-suggest-no-results" aria-hidden="true" data-js-auto-suggest-postion="default" data-js-auto-suggest-position="default" role="listbox"> <li class="c-menu-item"> <span tabindex="-1">No results</span></li> </ul> </div> </form> <button data-m='{"cN":"cancel-search","pid":"Cancel Search","id":"nn4c1c9c3m1r1a1","sN":4,"aN":"c1c9c3m1r1a1"}' id="cancel-search" class="cancel-search" aria-label="Cancel Search"> <span>Cancel</span> </button> </div> </div> </div> </header> </div> </div> </div> <div class='meControl-configInfo' data-isenabled='true' data-convergedstack='true' data-baseurl='/cascadeauth/account' data-appid='10fa57ef-4895-4ab2-872c-8c3613d4f7fb' data-appcallbackurl='https://www.microsoft.com/cascadeauth/account/signin-oidc' data-accountconstraint='0' data-apigeneration='GEN1' data-silentauthrequirereload='false' data-silentauthaction='none'></div> <div class='userInfo-config' data-userInfoUrl='/cascadeauth/api/v1/account/userinfo' data-userInfoTimeoutMS='1000' data-retryDelayMS='2000' data-maxRetryAttempt='3'></div> <script src="/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js"></script> </div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="28134f1ee1370eee417bc52d1ed0a717"> <main class="microsoft-template-layout-container" tabindex="-1"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="layout-container responsivegrid mb-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid23f0 default heading-bg-color-layout-container-uid23f0" data-automation-test-id="layout-container-uid23f0"> <style data-automation-test-id="headingColor-layout-container-uid23f0"> .heading-bg-color-layout-container-uid23f0{ background-color: !important; } </style> <div class="container" id="layout-container-uid23f0" data-componentName="layout-container-uid23f0"> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid089f material-color-primary heading-bg-color-layout-container-uid089f" data-automation-test-id="layout-container-uid089f"> <style data-automation-test-id="headingColor-layout-container-uid089f"> .heading-bg-color-layout-container-uid089f{ background-color: #0074D9 !important; } </style> <div class="container" id="layout-container-uid089f" data-componentName="layout-container-uid089f"> <div class="areaheading dynamic-price-container mt-md-5 mb-5 pl-2 pr-3 pt-3 pb-2 aem-GridColumn aem-GridColumn--default--12" data-component-id="60bf9066c3eebdbf5a6e3f039c9b54ab">  <script type="text/javascript" src="/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH6fc8affca0d3b2c5bdc78e27c9425bce.js" defer></script> <link rel="stylesheet" href="/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH8396009a793fda25f0ad1c495ec773f4.css" type="text/css"> <div id="areaheading-uid7c75" data-componentName="areaheading-uid7c75" class="area-heading " data-automation-test-id="Areaheading-areaheading-uid7c75" style="background-color: null"> <div class="row"> <div class="col-12 col-md-8 " data-automation-test-id="AreaheadingHeadingText-areaheading-uid7c75" style="color:"> <h1 data-automation-test-id="heading-areaheading-uid7c75" class="component-heading h2 " id="heading-areaheading-uid7c75"> <p>Microsoft Security Servicing Criteria for Windows</p> </h1> </div> </div> </div> </div> </div> </div></div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid0eb3 heading-bg-color-layout-container-uid0eb3" data-automation-test-id="layout-container-uid0eb3"> <style data-automation-test-id="headingColor-layout-container-uid0eb3"> .heading-bg-color-layout-container-uid0eb3{ background-color: !important; } </style> <div class="container" id="layout-container-uid0eb3" data-componentName="layout-container-uid0eb3"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-1a903d14-f02f-4cda-a3cb-b81ef89e3039"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><p>Our commitment to protecting customers from vulnerabilities in our software, services, and devices includes providing security updates and guidance that address vulnerabilities when they are reported to Microsoft. We also want to be transparent with security researchers and our customers in our approach. This document helps to describe the criteria the Microsoft Security Response Center (MSRC) uses to determine whether a reported vulnerability affecting up-to-date and currently supported versions of Windows may be addressed through servicing or in the next version of Windows. For vulnerabilities in Windows, servicing takes the form of a security update or applicable guidance, most commonly released on Update Tuesday (the second Tuesday of each month).</p> <h2><br /> <span class="h3 mb-0">Security Servicing Criteria</span><br /> </h2> <p>The criteria used by Microsoft when evaluating whether to provide a security update or guidance for a reported vulnerability involves answering two key questions:<span></span></p> <ol> <li>Does the vulnerability violate the goal or intent of a security boundary or a security feature?</li> <li>Does the severity of the vulnerability聽<a href="https://aka.ms/windowsbugbar">meet the bar for servicing</a>?<br /> </li> </ol> <p>If the answer to both questions is yes, then Microsoft鈥檚 intent is to address the vulnerability through a security update and/or guidance that applies to affected and supported offerings where commercially reasonable. If the answer to either question is no, then by default the vulnerability will be considered for the next version or release of Windows but will not be addressed through a security update or guidance, though exceptions may be made.</p> <p>This document addresses the most commonly reported vulnerabilities, but as security is an ever-evolving landscape there may be vulnerabilities that are not covered by this criteria or the criteria may be adapted due to changes in the threat landscape. Microsoft addresses vulnerabilities based on the risk they pose to customers and may at any time choose to address, or not address, reports based on the assessed risk.<br /> </p> <h3><br /> <span class="h4 mb-0">Security boundaries and features Microsoft intends to service</span><br /> </h3> <p>Microsoft鈥檚 software, services, and devices rely on a number of security boundaries and security features, as well as the security of the underlying hardware on which our software depends, in order to achieve our security goals.</p> <h4><br /> <span class="h5 mb-0">Security boundaries</span></h4> <p>A security boundary provides a logical separation between the code and data of security domains with different levels of trust. For example, the separation between kernel mode and user mode is a classic and straightforward security boundary. Microsoft software depends on multiple security boundaries to isolate devices on the network, virtual machines, and applications on a device. The following table summarizes the security boundaries that Microsoft has defined for Windows.</p> </div> </div> </div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uidd69c heading-bg-color-layout-container-uidd69c" data-automation-test-id="layout-container-uidd69c"> <style data-automation-test-id="headingColor-layout-container-uidd69c"> .heading-bg-color-layout-container-uidd69c{ background-color: !important; } </style> <div class="container" id="layout-container-uidd69c" data-componentName="layout-container-uidd69c"> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uid42e5" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uid42e5 .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uid42e5 .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uid42e5 .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Security Boundary</th> <style> @media (min-width: 1200px) { #tableV2-uid42e5 .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uid42e5 .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uid42e5 .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Security Goal</th> <style> @media (min-width: 1200px) { #tableV2-uid42e5 .columnName-3 { width: %; } } @media (max-width: 768px) { #tableV2-uid42e5 .columnName-3 { width: %; } } @media (max-width: 450px) { #tableV2-uid42e5 .columnName-3 { width: %; } } </style> <th class="columnName-3" scope="col">Intent is to service?</th> <style> @media (min-width: 1200px) { #tableV2-uid42e5 .columnName-4 { width: %; } } @media (max-width: 768px) { #tableV2-uid42e5 .columnName-4 { width: %; } } @media (max-width: 450px) { #tableV2-uid42e5 .columnName-4 { width: %; } } </style> <th class="columnName-4" scope="col">Bounty?</th> </tr> </thead> <tbody> <tr id="tableV2Row-uidde63"> <td>Network boundary</td> <td> <div> An unauthorized network endpoint cannot access or tamper with the code and data on a customer鈥檚 device. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Kernel boundary</td> <td> <div> A non-administrative user mode process cannot access or tamper with kernel code and data.聽This is applicable for聽the NT kernel and the Secure Kernel. For the NT kernel only, Administrator-to-kernel is not a security boundary. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Process boundary</td> <td> <div> An unauthorized user mode process cannot access or tamper with the code and data of another process. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>AppContainer sandbox boundary</td> <td> <div> An AppContainer-based sandbox process cannot access or tamper with code and data outside of the sandbox based on the container capabilities </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>User boundary</td> <td> <div> A user cannot access or tamper with the code and data of another user without being authorized. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Session boundary</td> <td> <div> A user logon session cannot access or tamper with another user logon session without being authorized. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Web browser boundary</td> <td> <div> An unauthorized website cannot violate the same-origin policy, nor can it access or tamper with the native code and data of the Microsoft Edge web browser sandbox. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-edge">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Virtual machine boundary</td> <td> <div> An unauthorized Hyper-V guest virtual machine cannot access or tamper with the code and data of another guest virtual machine; this includes Hyper-V Isolated Containers. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-hyper-v">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidde63"> <td>Virtual Secure Mode (VSM) Boundary</td> <td> <div> Data and code marked as private within a Virtual Trust Level (VTL) cannot be accessed or tampered with by code executing inside a lower VTL. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid7f7c"> <td>Virtualization-Based Security (VBS) Boundary</td> <td> <div> Data and code within a VBS Trustlet or Enclave cannot be accessed or tampered with by code executing outside of the VBS Trustlet or Enclave if not explicitly shared. Data and code of a VBS Trustlet or Enclave are always accessible by the Secure Kernel. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid mt-4 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-uidf003"> <h4><span class="h5 mb-0">Non-boundaries*</span></h4> <p><br /> Some Windows components and configurations are explicitly not intended to provide a robust security boundary. These components are summarized in the following table.</p> <p><strong>*Note: The following list is non-exhaustive and is intended to address components commonly mistaken as boundaries. By default, components are not considered boundaries unless explicitly named as such.</strong></p> </div> </div> </div> </div></div> <div class="layout-container responsivegrid mt-3 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uid25ed" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uid25ed .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uid25ed .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uid25ed .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Component</th> <style> @media (min-width: 1200px) { #tableV2-uid25ed .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uid25ed .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uid25ed .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Explanation</th> </tr> </thead> <tbody> <tr id="tableV2Row-uida667"> <td>Windows Server Containers</td> <td> <div> <p>Windows Server Containers provide resource isolation using a shared kernel but are not intended to be used in hostile multitenancy scenarios.聽 Scenarios that involve hostile multitenancy should use Hyper-V Isolated Containers to strongly isolate tenants.</p> <p>If an application runs as an unprivileged user account within a container, the normal Windows security boundaries apply to this application. The application should not be able to elevate to administrator, gain access to other user鈥檚 resources, etc</p> </div> </td> </tr> <tr id="tableV2Row-uida667"> <td>Administrator to Kernel</td> <td> <div> Administrative processes and users are considered part of the Trusted Computing Base (TCB) for Windows and are therefore not strong isolated from the kernel boundary. Administrators are in control of the security of a device and can disable security features, uninstall security updates, and perform other actions that make kernel isolation ineffective.聽This includes actions which require Administrator permissions like registry tampering with HKEY_LOCAL_MACHINE and any attack where the attacker has Local or Domain Administrator access. </div> </td> </tr> <tr id="tableV2Row-uida667"> <td>Hyper-V Administrators Group</td> <td> <div> The Hyper-V Administrators group is intended to allow Windows server administrators to manage their Hyper-V environments without having to log into the server as a Local Administrator. It is not intended to be a security boundary from full Administrators; group membership should be restricted and controlled as with other administrative groups. </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-uid96aa"> <h2><br /> <span class="h3 mb-0">Security features</span></h2> <p>Security features build upon security boundaries to provide robust protection against specific threats. In some cases, the goal of a security feature is to provide robust protection against a threat and there are expected to be no by-design limitations that would prevent the security feature from achieving this goal. For security features in this category, Microsoft intends to address reported vulnerabilities through servicing as summarized by the following table.</p> </div> </div> </div> </div></div> <div class="layout-container responsivegrid mb-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uid025c" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uid025c .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uid025c .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uid025c .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Category</th> <style> @media (min-width: 1200px) { #tableV2-uid025c .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uid025c .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uid025c .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Security Features</th> <style> @media (min-width: 1200px) { #tableV2-uid025c .columnName-3 { width: %; } } @media (max-width: 768px) { #tableV2-uid025c .columnName-3 { width: %; } } @media (max-width: 450px) { #tableV2-uid025c .columnName-3 { width: %; } } </style> <th class="columnName-3" scope="col">Security Goal</th> <style> @media (min-width: 1200px) { #tableV2-uid025c .columnName-4 { width: %; } } @media (max-width: 768px) { #tableV2-uid025c .columnName-4 { width: %; } } @media (max-width: 450px) { #tableV2-uid025c .columnName-4 { width: %; } } </style> <th class="columnName-4" scope="col">Intent is to service?</th> <style> @media (min-width: 1200px) { #tableV2-uid025c .columnName-5 { width: %; } } @media (max-width: 768px) { #tableV2-uid025c .columnName-5 { width: %; } } @media (max-width: 450px) { #tableV2-uid025c .columnName-5 { width: %; } } </style> <th class="columnName-5" scope="col">Bounty?</th> </tr> </thead> <tbody> <tr id="tableV2Row-uidaae3"> <td>Device Security</td> <td> <div> BitLocker </div> </td> <td> <div> Data that is encrypted on disk cannot be obtained when the device is turned off. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Device Security</td> <td> <div> Secure Boot </div> </td> <td> <div> Only authorized code can run in the pre-OS, including OS loaders, as defined by the UEFI firmware policy. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Platform Security</td> <td> <div> Windows Defender System Guard (WDSG) </div> </td> <td> <div> Improperly signed binaries cannot execute or load in accordance with the Application Control policy for the system. Bypasses leveraging applications which are permitted by the policy are not in scope. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Application security</td> <td> <div> Windows Defender Application Control (WDAC) </div> </td> <td> <div> Only executable code, including scripts run by enlightened Windows script hosts, that conforms to the device鈥檚 policy can run. Bypasses leveraging applications which are permitted by the policy are not in scope. Bypasses requiring administrative rights are not in scope. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Identity and access control</td> <td> <div> Windows Hello / Biometrics </div> </td> <td> <div> An attacker cannot spoof, phish, or breach NGC (Next Generation Credential) to impersonate a user. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Identity and access control</td> <td> <div> Windows Resource Access Control </div> </td> <td> <div> An identity (user, group) cannot access or tamper with a resource (file, named pipe, etc.) unless explicitly authorized to do so </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Cryptography API: Next Generation (CNG)</td> <td> <div> Platform Cryptography </div> </td> <td> <div> Algorithms are implemented to specification (e.g. NIST) and do not leak sensitive data. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Health attestation</td> <td> <div> Host Guardian Service (HGS) </div> </td> <td> <div> Assess the identity and health of a caller issuing or withholding health claims necessary for downstream cryptographic operations. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uidaae3"> <td>Authentication Protocols</td> <td> <div> Authentication Protocols </div> </td> <td> <div> Protocols are implemented to specification and an attacker cannot tamper with, reveal sensitive data, or impersonate users gaining elevated privileges. </div> </td> <td> <div> Yes </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-windows-insider-preview">Yes</a> </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-uid8e4f"> <h2><span class="h3 mb-0">Defense-in-depth security features</span></h2> <p>In some cases, a security feature may provide protection against a threat without being able to provide a robust defense. These security features are typically referred to as defense-in-depth features or mitigations because they provide additional security but may have by design limitations that prevent them from fully mitigating a threat. A bypass for a defense-in-depth security feature by itself does not pose a direct risk because an attacker must also have found a vulnerability that affects a security boundary, or they must rely on additional techniques, such as social engineering to achieve the initial stage of a device compromise.</p> <p>The following table summarizes the defense-in-depth security features that Microsoft has defined which do not have a servicing plan. Any vulnerability or bypass that affects these security features will not be serviced by default, but it may be addressed in a future version or release. Many of these features are being continuously improved across each product release and are also covered by active bug bounty programs.</p> <p>In some cases, defense-in-depth security features may take a dependency that will not meet the bar for servicing by default. As a result, these defense-in-depth security features will also not meet the bar for servicing by default. An example of this can be observed with Shielded Virtual Machines which takes a dependency on an administrator not being able to compromise the kernel or a Virtual Machine Worker Process (VMWP) which is protected by Protected Process Light (PPL). In this case, Administrator-to-Kernel and PPL are not serviced by default.</p> </div> </div> </div> </div></div> <div class="layout-container responsivegrid mb-4 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uid3d6c heading-bg-color-layout-container-uid3d6c" data-automation-test-id="layout-container-uid3d6c"> <style data-automation-test-id="headingColor-layout-container-uid3d6c"> .heading-bg-color-layout-container-uid3d6c{ background-color: !important; } </style> <div class="container" id="layout-container-uid3d6c" data-componentName="layout-container-uid3d6c"> <div class="tableV2 responsivegrid aem-GridColumn aem-GridColumn--default--12" data-component-id="c2852c9efa5136c8a2c6521b0fe067ff"> <table class="table " id="tableV2-uidaa83" tabindex="0"> <thead> <tr> <style> @media (min-width: 1200px) { #tableV2-uidaa83 .columnName-1 { width: %; } } @media (max-width: 768px) { #tableV2-uidaa83 .columnName-1 { width: %; } } @media (max-width: 450px) { #tableV2-uidaa83 .columnName-1 { width: %; } } </style> <th class="columnName-1" scope="col">Category</th> <style> @media (min-width: 1200px) { #tableV2-uidaa83 .columnName-2 { width: %; } } @media (max-width: 768px) { #tableV2-uidaa83 .columnName-2 { width: %; } } @media (max-width: 450px) { #tableV2-uidaa83 .columnName-2 { width: %; } } </style> <th class="columnName-2" scope="col">Security feature</th> <style> @media (min-width: 1200px) { #tableV2-uidaa83 .columnName-3 { width: %; } } @media (max-width: 768px) { #tableV2-uidaa83 .columnName-3 { width: %; } } @media (max-width: 450px) { #tableV2-uidaa83 .columnName-3 { width: %; } } </style> <th class="columnName-3" scope="col">Security goal</th> <style> @media (min-width: 1200px) { #tableV2-uidaa83 .columnName-4 { width: %; } } @media (max-width: 768px) { #tableV2-uidaa83 .columnName-4 { width: %; } } @media (max-width: 450px) { #tableV2-uidaa83 .columnName-4 { width: %; } } </style> <th class="columnName-4" scope="col">Intent is to service?</th> <style> @media (min-width: 1200px) { #tableV2-uidaa83 .columnName-5 { width: %; } } @media (max-width: 768px) { #tableV2-uidaa83 .columnName-5 { width: %; } } @media (max-width: 450px) { #tableV2-uidaa83 .columnName-5 { width: %; } } </style> <th class="columnName-5" scope="col">Bounty?</th> </tr> </thead> <tbody> <tr id="tableV2Row-uid3939"> <td>User safety</td> <td> <div> User Account Control (UAC) </div> </td> <td> <div> Prevent unwanted system-wide changes (files, registry, etc) without administrator consent </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>User safety</td> <td> <div> AppLocker </div> </td> <td> <div> Prevent unauthorized applications from executing </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>User safety</td> <td> <div> Controlled Folder Access </div> </td> <td> <div> Protect access and modification to controlled folders from apps that may be malicious </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Mark of the Web (MOTW) </div> </td> <td> <div> Prevent active content download from the web from elevating privileges when viewed locally </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Data Execution Prevention (DEP) </div> </td> <td> <div> An attacker cannot execute code from non-executable memory such as heaps and stacks </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Address Space Layout Randomization (ASLR) </div> </td> <td> <div> The layout of the process virtual address space is not predictable to an attacker (on 64-bit) </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Kernel Address Space Layout Randomization (KASLR) </div> </td> <td> <div> The layout of the kernel virtual address space is not predictable to an attacker (on 64-bit) </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Arbitrary Code Guard (ACG) </div> </td> <td> <div> An ACG-enabled process cannot modify code pages or allocate new private code pages </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Code Integrity Guard (CIG) </div> </td> <td> <div> A CIG-enabled process cannot directly load an improperly signed executable image (DLL) </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Control Flow Guard (CFG) </div> </td> <td> <div> CFG protected code can only make indirect calls to valid indirect call targets </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Child Process Restriction </div> </td> <td> <div> A child process cannot be created when this restriction is enabled </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> SafeSEH/SEHOP </div> </td> <td> <div> The integrity of the exception handler chain cannot be subverted </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Heap randomization and metadata protection </div> </td> <td> <div> The integrity of heap metadata cannot be subverted and the layout of heap allocations is not predictable to an attacker </div> </td> <td> <div> No </div> </td> <td> <div> <a href="https://microsoft.com/msrc/bounty-mitigation-bypass">Yes</a> </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Exploit mitigations</td> <td> <div> Windows Defender Exploit Guard (WDEG) </div> </td> <td> <div> Allow apps to enable additional defense-in-depth exploit mitigation features that make it more difficult to exploit vulnerabilities </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Platform lockdown</td> <td> <div> Protected Process Light (PPL) </div> </td> <td> <div> Prevent non-administrative non-PPL processes from accessing or tampering with code and data in a PPL process via open process functions </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> <tr id="tableV2Row-uid3939"> <td>Platform lockdown</td> <td> <div> Shielded Virtual Machines </div> </td> <td> <div> Help protect a VM鈥檚 secrets and its data against malicious fabric admins or malware running on the host from both runtime and offline attacks </div> </td> <td> <div> No </div> </td> <td> <div> No </div> </td> </tr> </tbody> </table> </div> </div> </div></div> <div class="layout-container responsivegrid mt-5 aem-GridColumn aem-GridColumn--default--12" data-component-id="51e927945f39700e952adb9bd3dc97e7"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 grid-image-layout-container-uidfc16 heading-bg-color-layout-container-uidfc16" data-automation-test-id="layout-container-uidfc16"> <style data-automation-test-id="headingColor-layout-container-uidfc16"> .heading-bg-color-layout-container-uidfc16{ background-color: !important; } </style> <div class="container" id="layout-container-uidfc16" data-componentName="layout-container-uidfc16"> <div class="richtext text aem-GridColumn aem-GridColumn--default--12" data-component-id="aca330e78c05fd9ffbcf8222be356f7b"> <div class="cmp-text text-break" data-automation-test-id="RichTextV1Div-richtext-39eee908-f411-402b-ba89-9e665faea0f8"> <div data-grid="col-12" class="m-rich-content-block context-ucx"><h2><span class="h3 mb-0">Revision History</span></h2> <ul class="c-list"> <li>September 10, 2018: First publication</li> <li>January 15, 2019: Added non-boundaries for Windows Server Containers, Administrator to Kernel</li> <li>January 24, 2020: Added non-boundary for Hyper-V Administrators Group; updated Administrator to Kernel non-boundary</li> <li>May 14, 2021: Updated description of Windows Container security features</li> </ul> </div> </div> </div> </div> </div></div> </div> </div> </div> </main></div> <div class="universalfooter aem-GridColumn aem-GridColumn--default--12" data-component-id="873fa1f863becf63b38092282d4ea0b1">   <div id="footerArea" class="uhf" data-m='{"cN":"footerArea","cT":"Area_coreuiArea","id":"a2Body","sN":2,"aN":"Body"}'> <div id="footerRegion" data-region-key="footerregion" data-m='{"cN":"footerRegion","cT":"Region_coreui-region","id":"r1a2","sN":1,"aN":"a2"}' > <div id="footerUniversalFooter" data-m='{"cN":"footerUniversalFooter","cT":"Module_coreui-universalfooter","id":"m1r1a2","sN":1,"aN":"r1a2"}' data-module-id="Category|footerRegion|coreui-region|footerUniversalFooter|coreui-universalfooter"> <footer id="uhf-footer" class="c-uhff context-uhf" data-uhf-mscc-rq="false" data-footer-footprint="/MSMSRC/MSMSRCFooter, fromService: True" data-m='{"cN":"Uhf footer_cont","cT":"Container","id":"c1m1r1a2","sN":1,"aN":"m1r1a2"}'> <nav class="c-uhff-nav" aria-label="Footer Resource links" data-m='{"cN":"Footer nav_cont","cT":"Container","id":"c1c1m1r1a2","sN":1,"aN":"c1m1r1a2"}'> <div class="c-uhff-nav-row"> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn1_cont","cT":"Container","id":"c1c1c1m1r1a2","sN":1,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">What's new</div> <ul class="c-list f-bare"> <li> <a aria-label="Surface Pro What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/surface/devices/surface-pro-11th-edition" data-m='{"cN":"Footer_WhatsNew_NewSurfacePro_nav","id":"n1c1c1c1m1r1a2","sN":1,"aN":"c1c1c1m1r1a2"}'>Surface Pro</a> </li> <li> <a aria-label="Surface Laptop What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/surface/devices/surface-laptop-7th-edition" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptop_nav","id":"n2c1c1c1m1r1a2","sN":2,"aN":"c1c1c1m1r1a2"}'>Surface Laptop</a> </li> <li> <a aria-label="Surface Laptop Studio 2 What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/d/Surface-Laptop-Studio-2/8rqr54krf1dz" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptopStudio2_nav","id":"n3c1c1c1m1r1a2","sN":3,"aN":"c1c1c1m1r1a2"}'>Surface Laptop Studio 2</a> </li> <li> <a aria-label="Surface Laptop Go 3 What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/d/Surface-Laptop-Go-3/8p0wwgj6c6l2" data-m='{"cN":"Footer_WhatsNew_SurfaceLaptopGo3_nav","id":"n4c1c1c1m1r1a2","sN":4,"aN":"c1c1c1m1r1a2"}'>Surface Laptop Go 3</a> </li> <li> <a aria-label="Microsoft Copilot What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-copilot" data-m='{"cN":"Footer_WhatsNew_CopilotMicrosoft_nav","id":"n5c1c1c1m1r1a2","sN":5,"aN":"c1c1c1m1r1a2"}'>Microsoft Copilot</a> </li> <li> <a aria-label="AI in Windows What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/windows/copilot-ai-features" data-m='{"cN":"Whatsnew_AIinWindows_nav","id":"n6c1c1c1m1r1a2","sN":6,"aN":"c1c1c1m1r1a2"}'>AI in Windows</a> </li> <li> <a aria-label="Explore Microsoft products What's new" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-products-and-apps" data-m='{"cN":"Footer_WhatsNew_ExploreMicrosoftProducts_nav","id":"n7c1c1c1m1r1a2","sN":7,"aN":"c1c1c1m1r1a2"}'>Explore Microsoft products</a> </li> <li> <a aria-label="Windows 11 apps What's new" class="c-uhff-link" href="https://www.microsoft.com/windows/windows-11-apps" data-m='{"cN":"Footer_WhatsNew_Windows_11_apps_nav","id":"n8c1c1c1m1r1a2","sN":8,"aN":"c1c1c1m1r1a2"}'>Windows 11 apps</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn2_cont","cT":"Container","id":"c2c1c1m1r1a2","sN":2,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Microsoft Store</div> <ul class="c-list f-bare"> <li> <a aria-label="Account profile Microsoft Store" class="c-uhff-link" href="https://account.microsoft.com/" data-m='{"cN":"Footer_StoreandSupport_AccountProfile_nav","id":"n1c2c1c1m1r1a2","sN":1,"aN":"c2c1c1m1r1a2"}'>Account profile</a> </li> <li> <a aria-label="Download Center Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/download" data-m='{"cN":"Footer_StoreandSupport_DownloadCenter_nav","id":"n2c2c1c1m1r1a2","sN":2,"aN":"c2c1c1m1r1a2"}'>Download Center</a> </li> <li> <a aria-label="Microsoft Store support Microsoft Store" class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2139749" data-m='{"cN":"Footer_StoreandSupport_SalesAndSupport_nav","id":"n3c2c1c1m1r1a2","sN":3,"aN":"c2c1c1m1r1a2"}'>Microsoft Store support</a> </li> <li> <a aria-label="Returns Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/returns" data-m='{"cN":"Footer_StoreandSupport_Returns_nav","id":"n4c2c1c1m1r1a2","sN":4,"aN":"c2c1c1m1r1a2"}'>Returns</a> </li> <li> <a aria-label="Order tracking Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/order-tracking" data-m='{"cN":"Footer_StoreandSupport_OrderTracking_nav","id":"n5c2c1c1m1r1a2","sN":5,"aN":"c2c1c1m1r1a2"}'>Order tracking</a> </li> <li> <a aria-label="Certified Refurbished Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/certified-refurbished-products" data-m='{"cN":"Footer_StoreandSupport_StoreLocations_nav","id":"n6c2c1c1m1r1a2","sN":6,"aN":"c2c1c1m1r1a2"}'>Certified Refurbished</a> </li> <li> <a aria-label="Microsoft Store Promise Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/why-microsoft-store?icid=footer_why-msft-store_7102020" data-m='{"cN":"Footer_StoreandSupport_MicrosoftPromise_nav","id":"n7c2c1c1m1r1a2","sN":7,"aN":"c2c1c1m1r1a2"}'>Microsoft Store Promise</a> </li> <li> <a aria-label="Flexible Payments Microsoft Store" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/payment-financing-options?icid=footer_financing_vcc" data-m='{"cN":"Footer_StoreandSupport_Financing_nav","id":"n8c2c1c1m1r1a2","sN":8,"aN":"c2c1c1m1r1a2"}'>Flexible Payments</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn3_cont","cT":"Container","id":"c3c1c1m1r1a2","sN":3,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Education</div> <ul class="c-list f-bare"> <li> <a aria-label="Microsoft in education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education" data-m='{"cN":"Footer_Education_MicrosoftInEducation_nav","id":"n1c3c1c1m1r1a2","sN":1,"aN":"c3c1c1m1r1a2"}'>Microsoft in education</a> </li> <li> <a aria-label="Devices for education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/devices/overview" data-m='{"cN":"Footer_Education_DevicesforEducation_nav","id":"n2c3c1c1m1r1a2","sN":2,"aN":"c3c1c1m1r1a2"}'>Devices for education</a> </li> <li> <a aria-label="Microsoft Teams for Education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/products/teams" data-m='{"cN":"Footer_Education_MicrosoftTeamsforEducation_nav","id":"n3c3c1c1m1r1a2","sN":3,"aN":"c3c1c1m1r1a2"}'>Microsoft Teams for Education</a> </li> <li> <a aria-label="Microsoft 365 Education Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/education/products/microsoft-365" data-m='{"cN":"Footer_Education_Microsoft365Education_nav","id":"n4c3c1c1m1r1a2","sN":4,"aN":"c3c1c1m1r1a2"}'>Microsoft 365 Education</a> </li> <li> <a aria-label="How to buy for your school Education" class="c-uhff-link" href="https://www.microsoft.com/education/how-to-buy" data-m='{"cN":"Footer_Howtobuyforyourschool_nav","id":"n5c3c1c1m1r1a2","sN":5,"aN":"c3c1c1m1r1a2"}'>How to buy for your school</a> </li> <li> <a aria-label="Educator training and development Education" class="c-uhff-link" href="https://education.microsoft.com/" data-m='{"cN":"Footer_Education_EducatorTrainingDevelopment_nav","id":"n6c3c1c1m1r1a2","sN":6,"aN":"c3c1c1m1r1a2"}'>Educator training and development</a> </li> <li> <a aria-label="Deals for students and parents Education" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/education" data-m='{"cN":"Footer_Education_DealsForStudentsandParents_nav","id":"n7c3c1c1m1r1a2","sN":7,"aN":"c3c1c1m1r1a2"}'>Deals for students and parents</a> </li> <li> <a aria-label="Azure for students Education" class="c-uhff-link" href="https://azure.microsoft.com/en-us/free/students/" data-m='{"cN":"Footer_Education_Azureforstudents_nav","id":"n8c3c1c1m1r1a2","sN":8,"aN":"c3c1c1m1r1a2"}'>Azure for students</a> </li> </ul> </div> </div> <div class="c-uhff-nav-row"> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn4_cont","cT":"Container","id":"c4c1c1m1r1a2","sN":4,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Business</div> <ul class="c-list f-bare"> <li> <a aria-label="Microsoft Cloud Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-cloud" data-m='{"cN":"Footer_Business_Microsoft_Cloud_nav","id":"n1c4c1c1m1r1a2","sN":1,"aN":"c4c1c1m1r1a2"}'>Microsoft Cloud</a> </li> <li> <a aria-label="Microsoft Security Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/security" data-m='{"cN":"Footer_Business_Microsoft Security_nav","id":"n2c4c1c1m1r1a2","sN":2,"aN":"c4c1c1m1r1a2"}'>Microsoft Security</a> </li> <li> <a aria-label="Dynamics 365 Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/dynamics-365" data-m='{"cN":"Footer_Business_MicrosoftDynamics365_nav","id":"n3c4c1c1m1r1a2","sN":3,"aN":"c4c1c1m1r1a2"}'>Dynamics 365</a> </li> <li> <a aria-label="Microsoft 365 Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-365/business" data-m='{"cN":"Footer_Business_M365_nav","id":"n4c4c1c1m1r1a2","sN":4,"aN":"c4c1c1m1r1a2"}'>Microsoft 365</a> </li> <li> <a aria-label="Microsoft Power Platform Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/power-platform" data-m='{"cN":"Footer_DeveloperAndIT_Power Platform_nav","id":"n5c4c1c1m1r1a2","sN":5,"aN":"c4c1c1m1r1a2"}'>Microsoft Power Platform</a> </li> <li> <a aria-label="Microsoft Teams Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-teams/group-chat-software" data-m='{"cN":"Footer_Business_Microsoft365_nav","id":"n6c4c1c1m1r1a2","sN":6,"aN":"c4c1c1m1r1a2"}'>Microsoft Teams</a> </li> <li> <a aria-label="Microsoft 365 Copilot Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/microsoft-365/copilot/copilot-for-work" data-m='{"cN":"Footer_CopilotMicrosoft365_nav","id":"n7c4c1c1m1r1a2","sN":7,"aN":"c4c1c1m1r1a2"}'>Microsoft 365 Copilot</a> </li> <li> <a aria-label="Small Business Business" class="c-uhff-link" href="https://www.microsoft.com/en-us/store/b/business?icid=CNavBusinessStore" data-m='{"cN":"Footer_Business-SmallBusiness_nav","id":"n8c4c1c1m1r1a2","sN":8,"aN":"c4c1c1m1r1a2"}'>Small Business</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn5_cont","cT":"Container","id":"c5c1c1m1r1a2","sN":5,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Developer & IT</div> <ul class="c-list f-bare"> <li> <a aria-label="Azure Developer & IT" class="c-uhff-link" href="https://azure.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftAzure_nav","id":"n1c5c1c1m1r1a2","sN":1,"aN":"c5c1c1m1r1a2"}'>Azure</a> </li> <li> <a aria-label="Developer Center Developer & IT" class="c-uhff-link" href="https://developer.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_DeveloperCenter_nav","id":"n2c5c1c1m1r1a2","sN":2,"aN":"c5c1c1m1r1a2"}'>Developer Center</a> </li> <li> <a aria-label="Documentation Developer & IT" class="c-uhff-link" href="https://learn.microsoft.com/docs/" data-m='{"cN":"Footer_DeveloperAndIT_Documentation_nav","id":"n3c5c1c1m1r1a2","sN":3,"aN":"c5c1c1m1r1a2"}'>Documentation</a> </li> <li> <a aria-label="Microsoft Learn Developer & IT" class="c-uhff-link" href="https://learn.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftLearn_nav","id":"n4c5c1c1m1r1a2","sN":4,"aN":"c5c1c1m1r1a2"}'>Microsoft Learn</a> </li> <li> <a aria-label="Microsoft Tech Community Developer & IT" class="c-uhff-link" href="https://techcommunity.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftTechCommunity_nav","id":"n5c5c1c1m1r1a2","sN":5,"aN":"c5c1c1m1r1a2"}'>Microsoft Tech Community</a> </li> <li> <a aria-label="Azure Marketplace Developer & IT" class="c-uhff-link" href="https://azuremarketplace.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_AzureMarketplace_nav","id":"n6c5c1c1m1r1a2","sN":6,"aN":"c5c1c1m1r1a2"}'>Azure Marketplace</a> </li> <li> <a aria-label="AppSource Developer & IT" class="c-uhff-link" href="https://appsource.microsoft.com/en-us/" data-m='{"cN":"Footer_DeveloperAndIT_AppSource_nav","id":"n7c5c1c1m1r1a2","sN":7,"aN":"c5c1c1m1r1a2"}'>AppSource</a> </li> <li> <a aria-label="Visual Studio Developer & IT" class="c-uhff-link" href="https://visualstudio.microsoft.com/" data-m='{"cN":"Footer_DeveloperAndIT_MicrosoftVisualStudio_nav","id":"n8c5c1c1m1r1a2","sN":8,"aN":"c5c1c1m1r1a2"}'>Visual Studio</a> </li> </ul> </div> <div class="c-uhff-nav-group" data-m='{"cN":"footerNavColumn6_cont","cT":"Container","id":"c6c1c1m1r1a2","sN":6,"aN":"c1c1m1r1a2"}'> <div class="c-heading-4" role="heading" aria-level="2">Company</div> <ul class="c-list f-bare"> <li> <a aria-label="Careers Company" class="c-uhff-link" href="https://careers.microsoft.com/" data-m='{"cN":"Footer_Company_Careers_nav","id":"n1c6c1c1m1r1a2","sN":1,"aN":"c6c1c1m1r1a2"}'>Careers</a> </li> <li> <a aria-label="About Microsoft Company" class="c-uhff-link" href="https://www.microsoft.com/about" data-m='{"cN":"Footer_Company_AboutMicrosoft_nav","id":"n2c6c1c1m1r1a2","sN":2,"aN":"c6c1c1m1r1a2"}'>About Microsoft</a> </li> <li> <a aria-label="Company news Company" class="c-uhff-link" href="https://news.microsoft.com/" data-m='{"cN":"Footer_Company_CompanyNews_nav","id":"n3c6c1c1m1r1a2","sN":3,"aN":"c6c1c1m1r1a2"}'>Company news</a> </li> <li> <a aria-label="Privacy at Microsoft Company" class="c-uhff-link" href="https://privacy.microsoft.com/en-us" data-m='{"cN":"Footer_Company_PrivacyAtMicrosoft_nav","id":"n4c6c1c1m1r1a2","sN":4,"aN":"c6c1c1m1r1a2"}'>Privacy at Microsoft</a> </li> <li> <a aria-label="Investors Company" class="c-uhff-link" href="https://www.microsoft.com/investor/default.aspx" data-m='{"cN":"Footer_Company_Investors_nav","id":"n5c6c1c1m1r1a2","sN":5,"aN":"c6c1c1m1r1a2"}'>Investors</a> </li> <li> <a aria-label="Diversity and inclusion Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/diversity/" data-m='{"cN":"Footer_Company_DiversityAndInclusion_nav","id":"n6c6c1c1m1r1a2","sN":6,"aN":"c6c1c1m1r1a2"}'>Diversity and inclusion</a> </li> <li> <a aria-label="Accessibility Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/accessibility" data-m='{"cN":"Footer_Company_Accessibility_nav","id":"n7c6c1c1m1r1a2","sN":7,"aN":"c6c1c1m1r1a2"}'>Accessibility</a> </li> <li> <a aria-label="Sustainability Company" class="c-uhff-link" href="https://www.microsoft.com/en-us/sustainability/" data-m='{"cN":"Footer_Company_Sustainability_nav","id":"n8c6c1c1m1r1a2","sN":8,"aN":"c6c1c1m1r1a2"}'>Sustainability</a> </li> </ul> </div> </div> </nav> <div class="c-uhff-base"> <a id="locale-picker-link" aria-label="Content Language Selector. Currently set to English (United States)" class="c-uhff-link c-uhff-lang-selector c-glyph glyph-world" href="https://www.microsoft.com/en-us/locale.aspx" data-m='{"cN":"locale_picker(US)_nav","id":"n7c1c1m1r1a2","sN":7,"aN":"c1c1m1r1a2"}'>English (United States)</a> <a data-m='{"id":"n8c1c1m1r1a2","sN":8,"aN":"c1c1m1r1a2"}' href="https://aka.ms/yourcaliforniaprivacychoices" class='c-uhff-link c-uhff-ccpa'> <svg role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43"> <title>Your Privacy Choices Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"/> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"/> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"/> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"/> </svg> <span>Your Privacy Choices</span> </a> <noscript> <a data-m='{"id":"n9c1c1m1r1a2","sN":9,"aN":"c1c1m1r1a2"}' href="https://aka.ms/yourcaliforniaprivacychoices" class='c-uhff-link c-uhff-ccpa'> <svg role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43"> <title>Your Privacy Choices Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"/> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"/> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"/> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"/> </svg> <span>Your Privacy Choices</span> </a> </noscript> <a data-m='{"id":"n10c1c1m1r1a2","sN":10,"aN":"c1c1m1r1a2"}' href="https://go.microsoft.com/fwlink/?linkid=2259814" class="c-uhff-link c-uhff-consumer"> <span>Consumer Health Privacy</span> </a> <nav aria-label="Microsoft corporate links"> <ul class="c-list f-bare" data-m='{"cN":"Corp links_cont","cT":"Container","id":"c11c1c1m1r1a2","sN":11,"aN":"c1c1m1r1a2"}'> <li id="c-uhff-footer_sitemap"> <a class="c-uhff-link" href="https://www.microsoft.com/en-us/sitemap1.aspx" data-mscc-ic="false" data-m='{"cN":"Footer_Sitemap_nav","id":"n1c11c1c1m1r1a2","sN":1,"aN":"c11c1c1m1r1a2"}'>Sitemap</a> </li> <li id="c-uhff-footer_contactus"> <a class="c-uhff-link" href="https://support.microsoft.com/contactus" data-mscc-ic="false" data-m='{"cN":"Footer_ContactUs_nav","id":"n2c11c1c1m1r1a2","sN":2,"aN":"c11c1c1m1r1a2"}'>Contact Microsoft</a> </li> <li id="c-uhff-footer_privacyandcookies"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-mscc-ic="false" data-m='{"cN":"Footer_PrivacyandCookies_nav","id":"n3c11c1c1m1r1a2","sN":3,"aN":"c11c1c1m1r1a2"}'>Privacy </a> </li> <li class=" x-hidden" id="c-uhff-footer_managecookies"> <a class="c-uhff-link" href="#" data-mscc-ic="false" data-m='{"cN":"Footer_ManageCookies_nav","id":"n4c11c1c1m1r1a2","sN":4,"aN":"c11c1c1m1r1a2"}'>Manage cookies</a> </li> <li id="c-uhff-footer_termsofuse"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?LinkID=206977" data-mscc-ic="false" data-m='{"cN":"Footer_TermsOfUse_nav","id":"n5c11c1c1m1r1a2","sN":5,"aN":"c11c1c1m1r1a2"}'>Terms of use</a> </li> <li id="c-uhff-footer_trademarks"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2196228" data-mscc-ic="false" data-m='{"cN":"Footer_Trademarks_nav","id":"n6c11c1c1m1r1a2","sN":6,"aN":"c11c1c1m1r1a2"}'>Trademarks</a> </li> <li id="c-uhff-footer_safetyandeco"> <a class="c-uhff-link" href="https://go.microsoft.com/fwlink/?linkid=2196227" data-mscc-ic="false" data-m='{"cN":"Footer_SafetyAndEco_nav","id":"n7c11c1c1m1r1a2","sN":7,"aN":"c11c1c1m1r1a2"}'>Safety & eco</a> </li> <li id="c-uhff-recycling"> <a class="c-uhff-link" href="https://www.microsoft.com/en-us/legal/compliance/recycling" data-mscc-ic="false" data-m='{"cN":"Recycling_nav","id":"n8c11c1c1m1r1a2","sN":8,"aN":"c11c1c1m1r1a2"}'>Recycling</a> </li> <li id="c-uhff-footer_aboutourads"> <a class="c-uhff-link" href="https://choice.microsoft.com" data-mscc-ic="false" data-m='{"cN":"Footer_AboutourAds_nav","id":"n9c11c1c1m1r1a2","sN":9,"aN":"c11c1c1m1r1a2"}'>About our ads</a> </li> <li>© Microsoft 2024</li> </ul> </nav> </div> </footer> <script id="uhf-footer-ccpa"> const globalPrivacyControlEnabled = navigator.globalPrivacyControl; const GPC_DataSharingOptIn = (globalPrivacyControlEnabled) ? false : checkThirdPartyAdsOptOutCookie(); function checkThirdPartyAdsOptOutCookie() { try { const ThirdPartyAdsOptOutCookieName = '3PAdsOptOut'; var cookieValue = getCookie(ThirdPartyAdsOptOutCookieName); return cookieValue != 1; } catch { return true; } } function getCookie(cookieName) { var cookieValue = document.cookie.match('(^|;)\\s*' + cookieName + '\\s*=\\s*([^;]+)'); return (cookieValue) ? cookieValue[2] : ''; } </script> </div> </div> </div> <script src="https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js"></script><script src="https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1"></script> </div> </div> </div> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH13abf4cf4f8384d04a599349524dbbad.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH10908f1c465eeadc74b1c17c9515eb8a.js"></script> <script src="/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH5ee9e4e4e0a5fd39092e63d2d102b12b.js"></script> <script src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js"></script>  <script type="text/javascript"> (function(){ var partnerScripts = { "meta": { "partnerJsHash": "ACSHASH00f6c26de9c7c0a1e7b10d8bb358e008" } }; window.partnerScripts = partnerScripts; })(); </script> <script id="mediapixel"> //<![CDATA[ //_pageBITags=jsonElement; //]]> </script> <script type="text/javascript" id="contentsquare"> (function(){ var contentSq = { "entryFile": "https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js", }; if (typeof window["partnerScripts"]==="undefined"){ window["partnerScripts"]={}; } window["partnerScripts"]["contentSquare"] = contentSq; })(); </script>   <div class="cookie-config" data-isenabled="false"></div> <script src="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js"></script>  <div id='customFeatureControl' enabledFeatures="contentbackfillgenerate,esiproductcards,feature-controlled-mwf,uhf-ms-io-endpoint,uhf-esi-cv,uhf-esi-cache,fraud-greenid,contentsquare,mediapixel,holiday-themer,lazyload-static-components,clientlibDefer,upsellEnabled,contentbackfillpkgdelete,healthcheck,contentbackfillhttpgenerate,perf-tracker-1ds,dynamic-bundle,cvIncrementer,tentingEnabled,chatCookiesImplemented,alertCountDownWithoutServerTime,pdpDynamicRendering,bundlesDynamicRendering,contentbackfillmetadatachangesvideo,contentbackfillmetadatachangesnonvideo,listDynamicRendering,experimentation-without-personalization,generic-list-importer,combinedUHF,cvCallEnabled,m365ProductCatalog,support-unsupported-locales,deferClickTale,videoLazyLoad,prefetchFontsEnabled,enable-code-isolation,imageLinkTag,fetchPriority,contentIngestionAgent,enableClickgroupTelemetry,imageLazyLoad,contentIngestionAgent-dispatcher2westus2Agent,isCacheControlFeatureEnabled,feature-controlled-content-card,lcpPrioritizationPhase1,ocReimagineTelemetry,deferScriptsEnabled,lcpPrioritizationPhase2,ocReimagineSlotNumberTelemetry,contentIngestionAgent-dispatcher1westus2Agent,ocReimagineComponentNameTelemetry,ocReimagineTemplateNameTelemetry,ptePhase1,extended-html-minification-sites,dynamicPrice,gl-auto-config,displayV35Toggle,chatCustomEndpoint,enableBoostPersonalization,ocReimagineTelemetryTemplateNameSwap,enableEmailConnector,enable-eventingService,ocReimagineAIAssistant,acsPMEFeatureEnabled,ocReimagineCustomerApiUrl,ocReimagineCustomerFilterApiUrl"></div> <div class='oneds-config' data-instrumentationkey='c066bee12c6f4b758071186c018d81f6-cc260522-939f-4a36-a72c-021a3f946bc4-7363' data-isenabled='true' data-env='prod' data-market='en-us' data-pageName='Microsoft Security Servicing Criteria for Windows' data-urlCollectQuery='true' data-urlCollectHash='true' data-autoCapturelineage='true' data-autoCaptureresize='true' data-autoCapturescroll='true' data-initialize1DSEventName="consent" data-tenantName='msrc' data-tenantTitle='MSRC Web Admins' data-tenantDomain='microsoft' data-tenantSiteName='microsoft' data-tenantNameProperty='tenantName' data-tenantTitleProperty='tenantTitle' data-tenantDomainProperty='tenantDomain' data-tenantSiteNameProperty='tenantSiteName' data-max1DSInitializeDelayInSeconds='1'> </div> <script src="/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHc3aec3d03bc5447975e3ee25b53f6c32.js"></script>  <script type="text/javascript" src="/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js" async></script>  </body> </html>

CINXE.COM

Microsoft Security Servicing Criteria for Windows