cloud-service-vulnerabilityai-platform-securityinternet-facing-service-vulnerabilitywidely-deployed-product-advisory

Microsoft Fixes Copilot, Azure, and Bing Images Flaws Including Critical RCE

Vulnerability Disclosure · 18 sources · Updated 3mo ago · First seen Mar 20, 2026

Microsoft disclosed a set of security flaws affecting cloud and AI services, including Microsoft 365 Copilot, Microsoft Copilot, Microsoft 365 Copilot BizChat, Azure DevOps, Azure Cloud Shell, Azure Data Factory, Microsoft Bing, and Microsoft Bing Images. The issues span information disclosure, elevation of privilege, tampering, and remote code execution, with published identifiers including CVE-2026-24299, CVE-2026-26136, CVE-2026-26137, CVE-2026-23658, CVE-2026-32169, CVE-2026-23659, CVE-2026-26120, and CVE-2026-32191. Germany's dCERT separately highlighted multiple vulnerabilities in Microsoft 365 Copilot, underscoring enterprise concern around AI-assisted productivity platforms.

The most severe issue in the group is CVE-2026-32191, a critical remote code execution flaw in Microsoft Bing Images. Public reporting tied the bug to OS command injection caused by improper neutralization of special elements in a command, potentially allowing an unauthenticated attacker to execute code over a network. Additional Bing exposure was tracked as CVE-2026-26120, a tampering vulnerability, while the Copilot-related flaws included both information disclosure and privilege escalation, indicating risk to data confidentiality and tenant-level access boundaries across Microsoft's hosted services.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

16 events · Jan 1, 2017 – Jul 23, 2026

Jul 23, 20263mo ago
XBOW publishes technical details on Bing Images RCE flaws
On 2026-07-23, XBOW published technical details for Bing image-processing vulnerabilities CVE-2026-32191 and CVE-2026-32194, showing that crafted SVG content could trigger command execution on Microsoft's production workers. The write-up said Microsoft had already patched the issues server-side before the March advisories and that no customer action was required.
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
Jun 19, 20265mo ago
Microsoft publishes CVE-2026-47645 for Copilot BizChat privilege escalation
A Microsoft-attributed listing for CVE-2026-47645 identifies a high-severity elevation of privilege vulnerability in Microsoft 365 Copilot's Business Chat with a CVSS 8.8 score. The record shows publication and last modification on 2026-06-19 and notes the issue is not remotely exploitable.
CVE-2026-47645 - Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Jun 18, 20265mo ago
Microsoft publishes CVE-2026-54130 for M365 Copilot information disclosure
A Microsoft-sourced listing for CVE-2026-54130 identifies a critical information disclosure vulnerability in Microsoft 365 Copilot with a CVSS 9.8 score. The entry provides publication and modification timestamps of 2026-06-18 but does not include a textual description or affected version details.
CVE-2026-54130 - M365 Copilot Information Disclosure Vulnerability
Jun 15, 20265mo ago
Varonis discloses SearchLeak data theft flaw in Microsoft 365 Copilot
Varonis disclosed SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that could let attackers exfiltrate sensitive data from sources such as mailbox, OneDrive, and SharePoint via a crafted link. Microsoft assigned CVE-2026-42824 and had already fixed the issue earlier in June without requiring customer action.
New attack turned Microsoft 365 Copilot into 1-click data theft tool
Apr 23, 20267mo ago
Microsoft discloses CVE-2026-33102 in Microsoft 365 Copilot
Microsoft disclosed CVE-2026-33102, a critical open redirect vulnerability in Microsoft 365 Copilot, on 2026-04-23. The company said the cloud-service flaw had already been fully remediated server-side before disclosure and that no customer patching was required.
Brief Summary: CVE-2026-33102 - Critical Open Redirect in Microsoft 365 Copilot Enables Privilege Escalation - ZeroPath Blog | ZeroPath
Mar 20, 20268mo ago
dCERT issues advisory on multiple Microsoft 365 Copilot vulnerabilities
dCERT published Advisory 2026-0778 covering multiple vulnerabilities in Microsoft 365 Copilot. The advisory was published on 2026-03-20.
dCERT - Advisory 2026-0778 - Microsoft 365 Copilot: Multiple Vulnerabilities
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-32191 for Bing Images remote code execution
Microsoft's Security Update Guide lists CVE-2026-32191 as a Microsoft Bing Images Remote Code Execution Vulnerability. A Bugflation write-up additionally describes it as an OS command injection issue and notes XBOW's self-reported discovery claim.
CVE-2026-32191 - Security Update Guide - Microsoft - Microsoft Bing Images Remote Code Execution Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-32169 for Azure Cloud Shell privilege escalation
Microsoft's Security Update Guide lists CVE-2026-32169 as an Azure Cloud Shell Elevation of Privilege Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-32169 - Security Update Guide - Microsoft - Azure Cloud Shell Elevation of Privilege Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-26137 for Copilot BizChat privilege escalation
Microsoft's Security Update Guide lists CVE-2026-26137 as a Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-26137 - Security Update Guide - Microsoft - Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-26136 for Microsoft Copilot information disclosure
Microsoft's Security Update Guide lists CVE-2026-26136 as a Microsoft Copilot Information Disclosure Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-26136 - Security Update Guide - Microsoft - Microsoft Copilot Information Disclosure Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-26120 for Bing tampering
Microsoft's Security Update Guide lists CVE-2026-26120 as a Microsoft Bing Tampering Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-26120 - Security Update Guide - Microsoft - Microsoft Bing Tampering Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-24299 for M365 Copilot information disclosure
Microsoft's Security Update Guide lists CVE-2026-24299 as an M365 Copilot Information Disclosure Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-24299 - Security Update Guide - Microsoft - M365 Copilot Information Disclosure Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-23659 for Azure Data Factory information disclosure
Microsoft's Security Update Guide lists CVE-2026-23659 as an Azure Data Factory Information Disclosure Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-23659 - Security Update Guide - Microsoft - Azure Data Factory Information Disclosure Vulnerability
Mar 19, 20268mo ago
Microsoft publishes CVE-2026-23658 for Azure DevOps privilege escalation
Microsoft's Security Update Guide lists CVE-2026-23658 as an Azure DevOps: msazure Elevation of Privilege Vulnerability. The advisory was published on 2026-03-19.
CVE-2026-23658 - Security Update Guide - Microsoft - Azure DevOps: msazure Elevation of Privilege Vulnerability
Aug 7, 20251y ago
Microsoft 365 Copilot BizChat CVE-2025-53787 is disclosed
A newly disclosed vulnerability, CVE-2025-53787, was reported as affecting Microsoft 365 Copilot BizChat and potentially exposing sensitive business data to unauthorized parties. Public details were limited at disclosure, with no exploit code, exploitation flow, affected versions, or vulnerable configurations released.
Microsoft 365 Copilot BizChat CVE-2025-53787 Information Disclosure Vulnerability: Brief Summary and Technical Context - ZeroPath Blog | ZeroPath
Jan 1, 201710y ago
Microsoft publishes CVE-2026-32194 for Bing Images remote code execution
Microsoft's Security Update Guide lists CVE-2026-32194 as a Microsoft Bing Images Remote Code Execution Vulnerability. The new reference indicates a distinct Microsoft advisory for this flaw, separate from the existing CVE-2026-32191 entry.
🔃 Security Update Guide - Loading - Microsoft

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

3 linked

OS Command Injection in Microsoft Bing Images Reverse Image Search (CVE-2026-32191)M365 Copilot Information Disclosure Vulnerability (CVE-2026-54130)Open Redirect Elevation of Privilege in Microsoft 365 Copilot Business Chat (CVE-2026-47645)

Affected products

2 linked

BingMicrosoft 365 Copilot

Organizations

1 linked

Microsoft Corporation

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

18 references tracked. Mallory keeps watching after this page renders.

The Hacker NewsNews · Jul 24, 2026

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's ServersOpen source ↗

Cvefeed High SeverityAdvisories · Jun 19, 2026

CVE-2026-47645 - Microsoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityOpen source ↗

Cvefeed High SeverityAdvisories · Jun 18, 2026

CVE-2026-54130 - M365 Copilot Information Disclosure VulnerabilityOpen source ↗

Cyber Security NewsNews · Jun 15, 2026

Critical Microsoft 365 Copilot Vulnerability Allows Attackers to Steal Data in One ClickOpen source ↗

10 additional sources from 19-03-2026 to 15-06-2026

Msrc Security AdvisoriesAdvisories · Mar 19, 2026

CVE-2026-26137 - Security Update Guide - Microsoft - Microsoft 365 Copilot BizChat Elevation of Privilege VulnerabilityOpen source ↗

Msrc Security AdvisoriesAdvisories · Mar 19, 2026

CVE-2026-32191 - Security Update Guide - Microsoft - Microsoft Bing Images Remote Code Execution VulnerabilityOpen source ↗

Zeropath BlogNews · Aug 7, 2025

Microsoft 365 Copilot BizChat CVE-2025-53787 Information Disclosure Vulnerability: Brief Summary and Technical Context - ZeroPath Blog | ZeroPathOpen source ↗

Msrc Security AdvisoriesAdvisories · Jan 1, 2017

🔃 Security Update Guide - Loading - MicrosoftOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News