icrosoft’s Chromium-based Edge browser has been there for a while, but it was available in developer and canary builds. Recently, Microsoft officially launched a more stable ‘Beta’ version of its Chromium-based web browser for Windows and Mac.
The new beta channel will now receive an update every six weeks and will join the existing canary and developer channels. Along with that, the company, of course, Microsoft also announced a huge bounty program for the security researchers and developers.
Recently, Microsoft published a blog post in which it stated that finding security vulnerabilities and bugs in Chromium-based Internet Edge browser can gain researchers bounty rewards of up to $30,000. Just like every other bug bounty program, the rewards depend on the quality and severity of the submission.
Jarek Stanley, senior program manager at Microsoft, said in a blog post “We welcome researchers to seek out and disclose any high-impact vulnerabilities they may find in the next version of Microsoft Edge, based on Chromium, and offer rewards up to the US $30,000 for eligible vulnerabilities in Dev and Beta channels”
Since the new program from Microsoft offers huge lumps of money, the challenges were also quite tricky. Microsoft will only reward the vulnerabilities which are unique to the Chromium-based Microsoft Edge. The company has also pointed a few features in Chromium Edge that are unique to the browser like the internet explorer mode, Application Guard, PlayReady DRM, etc.
The company is offering rewards in multiple tiers like reporting of critical and important vulnerabilities in Microsoft Edge (Beta and Dev Channels) will earn researchers up to $30,000. Upon the reporting of critical remote code execution and design issues in Microsoft Edge in Windows insider Preview slow ring will earn up to $15,000.
The new beta channel will now receive an update every six weeks and will join the existing canary and developer channels. Along with that, the company, of course, Microsoft also announced a huge bounty program for the security researchers and developers.
Recently, Microsoft published a blog post in which it stated that finding security vulnerabilities and bugs in Chromium-based Internet Edge browser can gain researchers bounty rewards of up to $30,000. Just like every other bug bounty program, the rewards depend on the quality and severity of the submission.
Jarek Stanley, senior program manager at Microsoft, said in a blog post “We welcome researchers to seek out and disclose any high-impact vulnerabilities they may find in the next version of Microsoft Edge, based on Chromium, and offer rewards up to the US $30,000 for eligible vulnerabilities in Dev and Beta channels”
Since the new program from Microsoft offers huge lumps of money, the challenges were also quite tricky. Microsoft will only reward the vulnerabilities which are unique to the Chromium-based Microsoft Edge. The company has also pointed a few features in Chromium Edge that are unique to the browser like the internet explorer mode, Application Guard, PlayReady DRM, etc.
The company is offering rewards in multiple tiers like reporting of critical and important vulnerabilities in Microsoft Edge (Beta and Dev Channels) will earn researchers up to $30,000. Upon the reporting of critical remote code execution and design issues in Microsoft Edge in Windows insider Preview slow ring will earn up to $15,000.