> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#3 The Hacker News general July 24, 2026 at 11:45 UTC

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

By [email protected] (The Hacker News)

AI Summary

XBOW researchers discovered that crafted SVG files submitted to Bing Image Search executed commands as NT AUTHORITY\SYSTEM on Windows and as root on Linux within Microsoft's production image-processing worker fleet, affecting multiple hosts across different network ranges. Microsoft issued two critical CVEs — CVE-2026-32194 and a second unspecified CVE — to address the vulnerabilities. The server-side RCE impact on Microsoft's production infrastructure makes this a significant supply-chain and cloud security incident.

Read full article → https://thehackernews.com/2026/07/bing-images-flaw…

Relevance score: 85.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  4. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  5. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  6. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  7. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  8. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News