Lucene search
+L

1 matches found

The Hacker News
The Hacker News
added 2026/07/24 11:45 a.m.18 views

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat i...

9.8CVSS7.3AI score0.0118EPSS
SaveExploits1
Rows per page
Query Builder