Microsoft Outlook RCE zero-day exploits now selling for $400,000

Exploit broker Zerodium has announced a pay jump to 400,000 for zero-day vulnerabilities that allow remote code execution (RCE) in Microsoft Outlook email client. The new payout is not permanent, the company says in a short tweet, but the end date for submissions is still to be disclosed. The company is not ruling out a bounty for exploits that require an email to be opened or read, although submits will get a lower, undisclosed payout. An RCE in an email client would grant attackers access to all available accounts.”]

Source: https://www.bleepingcomputer.com/news/security/microsoft-outlook-rce-zero-day-exploits-now-selling-for-400-000/