Bing Images RCE Vulnerability: Critical Flaws Patched

Microsoft patched three critical vulnerabilities in Bing Images that allowed remote code execution through specially crafted SVG uploads (notably CVE-2026-32194 and CVE-2026-32191) and one vulnerability affecting file upload controls (CVE-2026-21536); researchers demonstrated SYSTEM-level compromise on backend Windows Server 2022 systems, Microsoft remediated the issues and reported no user action required. The report highlights risks in cloud image-processing pipelines, provides recommended mitigations (sandboxing, input validation, restricting risky formats), and lists IoCs for security teams to investigate.