Microsoft's new Windows Age APIs allow applications to retrieve age range information (e.g., under 10, 10-12, 13-15, 16-17, 18+) associated with a Microsoft account without exposing sensitive personal data such as the full date of birth. Developers can use GetUserAgeRangeAsync to get age groups and GetAgeVerificationStatusAsync to confirm if the age is verified rather than self-reported. This facilitates automatic adjustment of app features and safeguards for younger users and applies to AI experiences where age-appropriate protections are critical. Age verification is integrated with Microsoft Age Verification (MAV), enabling a 'verify once, use everywhere' model. The feature is currently available in Singapore, Brazil, Australia, and will expand to more regions. The APIs are broadly available to Windows Insiders and will soon be released to all Windows 11 users.

The APIs provide a mechanism for applications to access age-related signals without exposing exact birthdates, potentially improving privacy while enabling age-appropriate content and safeguards. There is no indication of a vulnerability or exploit associated with these APIs. The impact is primarily on user experience and privacy management rather than security risk. No known exploits or active threats have been reported related to these APIs.

No security vulnerability or exploit has been identified in relation to these age-awareness APIs. Therefore, no mitigation or patching actions are required. Organizations and users should monitor official Microsoft communications for updates as the feature rolls out.