I have found a few bugs and exploits in my time. I was once threatened with legal action, another time after much following up said company informed me that it wasn’t a bug. It was fixed in their next patch.
Everyone who I know that finds exploits has the same stories.
This is *quite* a post.
I honestly don't know offhand: Has Microsoft as a company ever before suggested in any official statement that it might seek to have criminal charges brought against security researchers who drop 0days?
microsoft.com/en-us/msrc/blo…