Loading vulnerability…
OS Command Injection in Microsoft Bing Images Reverse Image Search
CVE-2026-32191 is an operating system command injection vulnerability in the crawler-based image ingestion path of Microsoft Bing Images. An attacker could host a crafted SVG and supply its URL through the reverse image search imgurl parameter, causing the backend crawler to retrieve it into a vulnerable image-processing pipeline. During parsing and rasterization, an ImageMagick-style delegate-capable conversion layer interpreted a pipe-prefixed SVG image reference as a shell command rather than an image resource. This allowed unauthenticated remote code execution without user interaction. The vulnerability is rated Critical with a CVSS v3.1 score of 9.8 and affects an exclusively Microsoft-hosted service.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could compromise the confidentiality, integrity, and availability of affected Bing image-processing workers. Validation of the shared vulnerable pipeline demonstrated command execution as NT AUTHORITY\SYSTEM on Windows Server 2022 Datacenter workers and as root on Linux workers, with reproducible exploitation across multiple backend hosts. These privileges could permit access to worker-accessible data, modification of processing workloads, and service disruption. Access to customer data was not demonstrated during validation.
If you can’t patch tonight, do this now.
No customer mitigation is required because Microsoft has fully mitigated the vulnerability in Bing Images. Defense-in-depth controls for comparable image-processing systems include disabling shell-invoking and pipe-based delegates, restricting accepted formats such as SVG, MVG, and EPS, sandboxing conversion workers with minimal privileges, constraining outbound network access, and applying destination allowlists and internal-address blocking to server-side URL fetching.
Patch, then assume compromise.
Microsoft fully remediated the vulnerability server-side before publishing its advisory on March 19, 2026. No customer patching, configuration changes, or other remediation actions are required for the Bing Images hosted service.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
19 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.