Microsoft Updates Dynamics 365 Bug Bounty Program

• •Microsoft's updated bug bounty program offers rewards from $1,250 to $60,000.
• •High-Impact Scenario Awards can double bounty amounts for critical vulnerabilities.
• •The program covers both Microsoft products and third-party components.

On September 17, 2026, Microsoft announced updates to its Dynamics 365 and Power Platform bug bounty program, offering bounty awards ranging from $1,250 to $60,000 for identifying security vulnerabilities. The program now includes a category for High-Impact Scenario Awards, which can provide up to 100% multipliers for critical vulnerabilities. Researchers are encouraged to report vulnerabilities that are classified as Critical or Important severity and reproducible on the latest versions of the products. The updated bounty program reflects a growing focus on cybersecurity as attack surfaces expand, particularly with the rise of generative AI tools. The program covers not only Microsoft products but also third-party and open-source components. Specific vulnerabilities eligible for bounties include cross-tenant vulnerabilities and privilege escalation scenarios. Microsoft has been enhancing its bug bounty program since its launch in 2019, with significant updates in 2022 and 2024. The company encourages researchers to utilize its MSRC Research Portal for submissions.