CVE-2025-21355

CVE-2025-21355 affects Microsoft Bing (web service). The issue is a Missing Authentication for a Critical Function in Bing that enables an unauthenticated, network-based attacker to execute code, i.e., remote code execution. The root cause is lack of authentication for a critical function, allowi...

CVE-2026-45650

CVE-2026-45650 describes a UI misrepresentation vulnerability in Microsoft Bing Search that could enable an attacker to spoof information over a network. The exact root cause and affected UI components are not detailed in the provided documents. CVSSv3.1 base score is 4.3 (Medium): Network attack...