Aug 12025 Microsoft now pays up to $40,000 for some.NET vulnerabilities Microsoft has expanded its. NET bug bounty program and increased rewards to $40,000 for some. NET and ASP.NET Core vulnerabilities.