Bing Images Vulnerability Lets Attackers Execute Remote Code on Microsoft Servers

This report details three critical RCE vulnerabilities (two in Bing Images image-processing pipelines exploitable via crafted SVGs and a third involving unrestricted executable uploads) that enabled command execution as NT AUTHORITY\SYSTEM on Bing image-processing workers; the issues were discovered and disclosed by XBOW and have been patched by Microsoft, but the findings warn that similar image converters remain high-risk and require configuration, egress controls, and sandboxing.