Mi pregunta es que si alguien me puede decir como se le pueden reportar bugs a microsoft y a adobe
He leido por ahi que para enviarle a microsoft uno hay que pagar 35$ y para adobe no he visto nada de como enviarle uno
como se haría?

¿Donde has leído que hay que pagarle a Microsoft por reportar un bug? WTF

http://support.microsoft.com/contactus/?ws=support

f you are a security researcher and believe you have found a security vulnerability that meets the definition of a security vulnerability that is not resolved by the 10 Immutable Laws of Security, please send e-mail to us at secure@microsoft.com with as much of the below information as possible. This information will help us to better understand the nature and scope of the possible issue.

Type of issue (buffer overflow, SQL injection, cross-site scripting, etc.)
Product and version that contains the bug
Service packs, security updates, or other updates for the product you have installed
Any special configuration required to reproduce the issue
Step-by-step instructions to reproduce the issue on a fresh install
Proof-of-concept or exploit code
Impact of the issue, including how an attacker could exploit the issue
To encrypt your message to our PGP key, please download it from the Microsoft Security Response Center PGP Key.

You should receive a response within 24 hours. If for some reason you do not, please follow up with us to ensure we received your original message.

Porque en lugar de reportarlos, te aprovechas de ellos?
a no ser que ese bug no lleve a nada importante :/