importantSYS.SOURCE: The Hacker News• 2026-07-24T17:15:17+05:30

Bing Images Vulnerability Allows Command Execution via Crafted SVGs on Microsoft Servers

#vulnerability #command-injection #microsoft #web-security #image-processing

Microsoft's Bing Images service was found to have critical vulnerabilities allowing crafted SVGs to execute commands with SYSTEM privileges on its servers. Two CVEs, CVE-2026-32194 and CVE-2026-32191, were disclosed after XBOW's responsible disclosure and Microsoft's server-side remediation.

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.

XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and

Read original article

*** END OF TRANSMISSION ***

> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES