Microsoft has addressed significant security vulnerabilities in its Bing Images service, which exposed its servers to potential exploitation. The vulnerabilities, identified as critical by Microsoft, were discovered in the image-processing infrastructure, allowing attackers to execute remote code using specially crafted SVG files.
Discovery and Impact
The vulnerabilities, brought to light by the AI security researcher XBOW, have been patched following their responsible disclosure. These flaws threatened Microsoft’s Bing servers, granting attackers potential SYSTEM-level access. Microsoft tagged these issues as critical, with each scoring a maximum of 9.8 on the CVSS scale.
Specifically, CVE-2026-32194 was linked to command injection in Bing’s image-processing segment, vulnerable through the “Search by Image” feature. Another, CVE-2026-32191, was found in the server-side image ingestion path related to Bing’s reverse image search. A separate issue, CVE-2026-21536, involved unrestricted file uploads in the Microsoft Devices Pricing Program.
Technical Analysis
The vulnerabilities were initially unearthed when Bing’s reverse image search was manipulated to fetch attacker-controlled URLs, a classic server-side request forgery (SSRF) scenario. The SSRF led researchers to identify inconsistent server responses, suggesting deeper server processing rather than simple image retrieval.
Further investigation revealed that the image-processing component used an ImageMagick-style engine, which was vulnerable to command injection via SVG files. SVG files, being XML-based, can include commands that, when improperly handled, execute as system commands.
The exploit was possible through two paths: direct image uploads via Bing’s endpoint or through external hosting pulled in by the SSRF vulnerability.
Lessons and Mitigation
Organizations utilizing similar image-processing systems should implement several security measures. Disabling shell-invoking and pipe-based delegate functions in image converters like ImageMagick is recommended. Restrictive configurations should be enforced to prevent high-risk formats unless necessary.
Moreover, egress controls and sandboxing image conversion processes with limited privileges are vital. It’s crucial to build validation systems that consider different server environments to ensure all potential exploitation signals are detected.
Microsoft has resolved these vulnerabilities in its Bing Images service, highlighting the importance of treating image conversion systems as security-critical code. This incident serves as a broader warning for any service handling image uploads or external URL fetches to maintain rigorous security standards.
Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. Integrate ANY.RUN With Your SOC Now.
