Microsoft now pays up to $40,000 for some .NET vulnerabilities

Microsoft has expanded its .NET bug bounty program, raising maximum awards to $40,000 for critical .NET and ASP.NET Core vulnerabilities (including remote code execution and privilege escalation) and increasing payouts for other bug classes; the program scope now covers all supported .NET/ASP.NET versions, adjacent technologies like F#, templates, and related GitHub Actions, and the article references Microsoft's broader security incentive efforts such as previous bounty increases and the Zero Day Quest.