Share this article

Latest news

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Microsoft awards first $100k bounty for mitigation bypass technique in Internet Explorer 11

2 min. read

Published onOctober 9, 2013

published onOctober 9, 2013

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Microsoft’s IE11 Preview Bug Bounty has come to a close and the company revealed on the 7th of October that they had paid $28,000 to six researchers for fifteen bugs in Internet Explorer 11.  Today, Microsoft has revealed that they have paid $100,000 to a researcher for a new mitigation bypass technique in Internet Explorer 11. This now means Microsoft has paid a total of $128,000 to hackers for finding exploits in the browser that’s set to ship with Windows 8.1.

“Congratulations to James Forshaw for coming up with a new exploitation technique to get our first ever $100,000 bounty. A security vulnerability researcher with Context Information Security, James already came in hot with design level bugs he found during the IE11 Preview Bug Bounty, and we’re thrilled to give him even more money for helping us improve our platform-wide security by leaps,” Microsoft stated in an official blog post.

According to the devices and services giant, learning about new mitigation bypass techniques can help the company develop defenses against an entire classes of attack. This can help make individual vulnerabilities less useful when attackers attempt to wreak havoc.

“Until then, our special thanks go to James: Congratulations and well done! You not only made history by receiving a total of $109,400 from our bounty programs, you’re also helping us make our customers safer from entire classes of attack. On behalf of over a billion people worldwide — Thank you and way to go!!” Microsoft adds.

You canview the winners listed hereby name and amount of bounty paid. One of the winners earned a bonus for “finding cool IE design vulnerabilities,” which was not disclosed by the company.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Δ

Radu Tyrsina