Loading vulnerability…
Unauthenticated command injection in Microsoft Bing Images
CVE-2026-32194 is a command-injection vulnerability in Microsoft Bing Images affecting the public Search by Image upload feature. Attacker-controlled SVG content reaches a backend image-processing pipeline whose delegate-enabled conversion behavior improperly interprets specially crafted image references as shell commands. Researchers identified behavior consistent with ImageMagick or an ImageMagick-compatible renderer, including a pipe-prefixed SVG image reference triggering operating system command execution during parsing and rasterization. Exploitation requires neither authentication nor user interaction. Microsoft classified the vulnerability as Critical with a CVSS v3.1 score of 9.8. The issue affects an exclusively hosted service and was remediated server-side.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution on Bing image-processing workers, with high confidentiality, integrity, and availability impact. Researchers demonstrated execution as NT AUTHORITY\SYSTEM on Windows Server 2022 Datacenter workers and reported root-level execution on Linux workers in the affected processing tier. The behavior reproduced across multiple backend hosts. These privileges could permit access to worker-accessible data, modification of processing workloads, and service disruption; researcher validation used benign commands and did not establish customer-data access.
If you can’t patch tonight, do this now.
For image-processing systems with comparable exposure, disable shell-invoking delegates and pipe-based command interpretation, enforce restrictive converter policies, and disable SVG, MVG, and EPS processing unless required. Isolate conversion workers in sandboxes, run them with minimal privileges, and constrain outbound network access. Restrict renderer-initiated external resource retrieval through destination allowlists and internal-address blocking. These are defense-in-depth measures, not a documented description of Microsoft's deployed fix.
Patch, then assume compromise.
Microsoft fully remediated the vulnerability in its hosted Bing Images infrastructure before publishing its March 19, 2026 advisory. No customer patching or other customer action is required. Specific implementation details of Microsoft's fix are not available.
No validated public exploits yet. Hidden: 2 rejected by Mallory's analysis as not a working exploit.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
24 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.