Redmond's sign-on system is so secure, nobody can get in

The vulnerability could potentially have allowed a malicious actor
to crash the programme and use it to achieve remote code execution.
It was first spotted on 27 June 2019 and publicly disclosed on 20 September,
netting its discoverer a €3,250 (£2,782) bonus.