If a researcher
reports a
qualifying vulnerability already found internally by Microsoft, a payment will be made to the first finder at a maximum of 10 % of the highest amount they could've received (example: $ 1,500 for a RCE in Edge, $ 25,000 for RCE in Hyper - V)