CVE-2026-32194
Microsoft Bing Images Remote Code Execution Vulnerability
CRITICAL 9.8EPSS 1.1%
Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.
- Affected
- Microsoft · Microsoft Bing Images
- CVSS v3.1 MICROSOFT
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.09% chance of exploitation in the next 30 days, 65th percentile
- Published
- 2026-03-19
- Updated
- 2026-06-19
Proof-of-concept exploits (1)
- HORKimhab/CVE-2026-321940★ · 2026-07-25