[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIr9tBwWAlF7MX3ouY4wE4Y4fEeKBnUBt5viJr55ZXJE":3},{"article":4,"iocs":50,"watch_terms":58,"solutions":59,"lesson":148},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"13016a28-8c7c-4327-a8ea-1892a0a172ce","Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers","bing-images-flaws-let-crafted-svgs-run-commands-as-system-on-microsoft-s-servers-3f283a","A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and","Microsoft patched two critical CVEs (CVE-2026-32194 and CVE-2026-32191) affecting Bing Images that allowed attackers to run arbitrary commands as NT AUTHORITY\\SYSTEM on Windows and root on Linux image-processing workers via malicious SVG files. Security firm XBOW discovered the flaws, which exploited ImageMagick delegate functionality and shell command injection; Microsoft fixed both server-side before disclosure in March 2026, and XBOW published exploit details in July 2026.","Crafted SVGs in Bing Images triggered command execution as SYSTEM\u002Froot on Microsoft servers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fbing-images-flaws-let-crafted-svgs-run.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEirbs2h3QyfDG1ChFBHv8CQNwf9JrDdDWLaZ0AZ2WTiJrsjmmeQUXSFc8FM4OvPgxDig-z2H1Di7OMqCC_0mHbicAvDw6TGF-1jWihJ458GYQBKznb3VOehlOPqWfALnkz8k3DBfehWG2z5nmpu77OgRxJ1iQxL7lsrd1IH3YR6ZHPpSUns-tdmDYScHck\u002Fs1600\u002Fbing-image.jpg","2026-07-24T11:45:17+00:00","2026-07-24T14:00:23.468841+00:00",9,[17,20,23,26],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Bing Images","product",{"name":24,"type":25},"XBOW","threat_actor",{"name":27,"type":28},"ImageMagick","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,45],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[51,55],{"type":52,"value":53,"context":54},"cve","CVE-2026-32194","Command injection via base64-encoded SVG in \u002Fimages\u002Fkblob upload endpoint (CWE-77)",{"type":52,"value":56,"context":57},"CVE-2026-32191","OS command injection via imgurl parameter in reverse image search crawler (CWE-78)",[18,21],{"controls":60,"vendors":144},[61,90,118],{"slug":62,"name":63,"problem":64,"products":65},"patch-management","Automated patch management","Known holes get closed in days, not months.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":91,"name":92,"problem":93,"products":94},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[95,103,110],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"airlock-digital","Airlock Digital","\u002Fvendor-logos\u002Fairlock-digital.png","airlock-allowlisting","Airlock Allowlisting and Execution Control","https:\u002F\u002Fwww.airlockdigital.com\u002F","Blocks anything not explicitly trusted from running, with tools to build and keep the trusted list current as software changes.",{"vendor_slug":104,"vendor_name":18,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","app-control-for-business","App Control for Business","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002F","Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","allowlisting","Allowlisting","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fallowlisting","Blocks any software that has not been approved, including ransomware and unapproved remote-access tools. A learning period builds the approved list first.",{"slug":119,"name":120,"problem":121,"products":122},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[123,128,136],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":124,"product_name":125,"url":126,"description":127},"zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",[145],{"slug":104,"name":18,"logo_path":105,"roles":146},[147],"affected",{"slug":149,"title":150,"body":151,"framework_refs":152,"framework_notes":163},"malicious-svgs-enabled-system-level-rce-on-bing-image-servers","Malicious SVGs Enabled SYSTEM-Level RCE on Bing Image Servers","Attackers could craft malicious SVG files to exploit ImageMagick's delegate functionality and shell command injection vulnerabilities, achieving full SYSTEM-level code execution on Microsoft's Bing image-processing infrastructure. The root issue lies in trusting user-supplied file content without sufficient sanitization before passing it to a powerful, feature-rich third-party processing library. ImageMagick's delegate system, which invokes shell commands to handle certain file formats, has a well-documented history of dangerous misuse — yet it remained insufficiently hardened in this production environment. This matters because server-side image processing pipelines are a common but underestimated attack surface, and SYSTEM\u002Froot-level compromise means complete loss of server confidentiality, integrity, and availability.",[153,154,155,156,157,158,159,160,161,162],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SI-10: Information Input Validation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SC-39: Process Isolation","NIST SP 800-218 (SSDF) PW.6: Use Vetted Software with Secure Configurations","OWASP ASVS V12: File and Resource Upload Verification","OWASP Top 10 A03:2021 – Injection",{}]