Hà Anh Hoàng

Hà Anh Hoàng

Senior Researcher

◆ Security Research

Specializes in complex challenges and security research targeting major vendors, particularly Microsoft

🔒
34
Advisories
10 this year
📚
0
Publications
Research papers
🏆
8
Recognition
Awards & bounties
🏢
4
Vendors
Organizations

📊 Activity Overview

Last 12 Months Activity

Oct
Nov
2
Dec
Jan
4
Feb
1
Mar
5
Apr
May
Jun
Jul
Aug
Sep

Top Vendors

Microsoft 21 vulnerabilities
Unknown Vendor 10 vulnerabilities
NukeViet 2 vulnerabilities
Solarwinds 1 vulnerability

Discovery Timeline

2026

10 advisories
🔒 Advisory
VCSA-2026-Q2-02
Multiple Privilege Escalations in Dynamics 365 online (Sales, Customer Service, Customer Insight) (x5-10)
Microsoft
🔒 Advisory
VCSA-2026-Q2-03
Multiple possible Copilot Autonomous Sales agent information disclosure (x2)
Microsoft
🔒 Advisory
VCSA-2026-Q2-04
Multiple possible Copilot Autonomous Sales agent inference manipulation (x2)
Microsoft
🔒 Advisory
VCSA-2026-Q1-09
Microsoft Dynamics 365 Remote Code Execution
Microsoft
🔒 Advisory
VCSA-2026-Q1-10
Microsoft Dynamics 365 Remote Code Execution
Microsoft
🔒 Advisory
VCSA-2026-Q1-11
Microsoft Dynamics 365 Online Information Disclosure Vulnerability
Microsoft
🔒 Advisory
VCSA-2026-Q1-12
Microsoft Dynamics 365 (On-Premises) Elevation of Privilege
Microsoft
🔒 Advisory
VCSA-2026-Q1-13
Microsoft Dynamics 365 (On-Premises) Elevation of Privilege
Microsoft
+2 more

2025

3 advisories , 1 award
🔒 Advisory
VCSA-2026-Q1-06
Microsoft Dynamics 365 Spoofing
Microsoft
🔒 Advisory
CVE-2025-62206
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Microsoft
🔒 Advisory
CVE-2025-53728
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Microsoft
🏆 Recognition
Top 5 Pwn2Own Tokyo (Automative) 2025
Kenwood, Alpine, ChargePoint, Sony
🏅 Pwn2Own

2023

2 awards
🏆 Recognition
Master of Pwn in Pwn2Own Toronto (IoT) 2023
Xiaomi, QNAP, Canon, Sonos, HP, Lexmark
🏅 Pwn2Own
🏆 Recognition
MSRC 2023 Most Valuable Security Researchers
Microsoft
🏅 MSRC MVP

2022

4 advisories , 3 awards
🏆 Recognition
Top 2 Master of Pwn at Pwn2Own Toronto 2022
Canon, Western Digital, HP, TP-Link, Cisco
🏅 Pwn2Own
🏆 Recognition
MSRC 2022 Most Valuable Security Researchers
Microsoft
🏅 MSRC MVP
🔒 Advisory
CVE-2022-23273
CVE-2022-23273
Microsoft
🔒 Advisory
CVE-2022-23274
CVE-2022-23274
Microsoft
🔒 Advisory
CVE-2022-23272
CVE-2022-23272
Microsoft
🔒 Advisory
CVE-2022-23271
CVE-2022-23271
Microsoft
🏆 Recognition
MSRC 2021 Q4 Most Valuable Security Researchers
Microsoft
🏅 MSRC MVP

2021

1 advisory , 1 award
🔒 Advisory
CVE-2021-35212
CVE-2021-35212
Solarwinds
🏆 Recognition
MSRC 2021 Most Valuable Security Researchers
Microsoft
🏅 MSRC MVP

2020

6 advisories , 1 award
🏆 Recognition
MSRC 2020 Most Valuable Security Researchers
Microsoft
🏅 MVP Microsoft Year
🔒 Advisory
CVE-2020-1022
CVE-2020-1022
Microsoft
🔒 Advisory
CVE-2020-0905
CVE-2020-0905
Microsoft
🔒 Advisory
CVE-2020-17152
CVE-2020-17152
Microsoft
🔒 Advisory
CVE-2020-17158
CVE-2020-17158
Microsoft
🔒 Advisory
CVE-2020-21808
CVE-2020-21808
NukeViet
🔒 Advisory
CVE-2020-21809
CVE-2020-21809
NukeViet
🔒 Advisory
ZDI-CAN-22377
Unknown Vendor
+9 more

🔒 CVE Advisories 34

Security vulnerabilities discovered and disclosed

🏆 Recognition & Highlights 8

Bug bounty rewards and achievements