CRITICALVulnerability
Global

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

·Source: The Hacker News

Updated:

Executive Summary

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and

Analysis

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and

Indicators of Compromise (1)

CVE (1)
CVE-2026-32194
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jul 24, 2026.

Related Threats

MEDIUMVulnerability

Wise US national trust bank charter application rejected

Shares in Wise tumbled after US regulators rejected the fintech's national bank charter application, citing compliance concerns.

Finextra
LOWVulnerability

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.

The Hacker News
MEDIUMVulnerability

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trust hallucinated package, repo, or domain names. ActiveState explains how pre-fetch verification and governed dependency management can help stop these attacks before malicious code enters the pipeline. [...]

BleepingComputer