Bing Image Crawler Executes Attacker-Hosted SVG as SYSTEM
Bing's crawler fetches attacker-hosted SVGs via imgurl and processes them as SYSTEM. CVE-2026-32191 (CVSS 9.8) is patched server-side by Microsoft.
- Vendor
- Microsoft
- Product
- Bing Image Processing Infrastructure
- CVSS
- 9.8
- EPSS (exploit probability)
- 0.8%
- Status
- patched
- Published
Is CVE-2026-32191 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-32191 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-11-13 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 0.8% (scored November 5, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison
CVE-2026-32191 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
Bing’s image crawler fetched attacker-supplied SVG content via the imgurl parameter and processed it using ImageMagick’s delegate system, which shells out to external programs for certain formats. A pipe character in the image path reached that shell as a command separator, executing arbitrary commands as NT AUTHORITY\SYSTEM on Windows workers and as root on Linux workers in the same fleet.
The attack required no authentication. The attacker hosts a crafted SVG at an external URL, submits it via the imgurl parameter, and bingbot/2.0 fetches and processes it — running the attacker’s command in the image worker’s execution context. XBOW confirmed this across workers at multiple hosts and network ranges.
Microsoft fixed the issue server-side before its March 19, 2026 advisory. Public disclosure came July 23, 2026 via the XBOW research writeup. No end-user action is required. See also: companion upload-path vulnerability CVE-2026-32194.
Other Microsoft CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-124194 Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability | [ MEDIUM ] | 6.5 | 1.6% | |
| CVE-2026-96951 Microsoft Windows Command Injection Vulnerability | [ HIGH ] | 8.8 | 9.8% | |
| CVE-2026-96940 Microsoft Exchange Server privilege escalation via weak authorizationwrite-up | [ HIGH ] | 8.8 | 2.7% | — |
| CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerabilitywrite-up | [ HIGH ] | 8.8 | 9.9% | |
| CVE-2026-85889 Azure AI Foundry missing authentication allows unauthorized privilege escalationwrite-up | [ CRITICAL ] | 10.0 | 0.7% | — |
| CVE-2026-69843 Microsoft Fabric authentication bypass by spoofingwrite-up | [ CRITICAL ] | 10.0 | 0.9% | — |
| CVE-2026-85880 Microsoft Windows ALPC Heap Buffer Overflow Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 0.4% | |
| CVE-2026-81963 Microsoft Windows Update Stack Link-Following Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 7.1% |
