According to the page, fixing individual vulnerabilities won't typically be rewarded. This seems like it's for more systemic fixes, like improving privilege sep

According to the page, fixing individual vulnerabilities won't typically be rewarded. This seems like it's for more systemic fixes, like improving privilege separation, security at the memory allocation level, etc.