CVE-2026-32194

CRITICAL

Microsoft Bing Images Remote Code Execution Vulnerability

Title source: cna

Description

Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.

Exploits (1)

nomisec SUSPICIOUS
by z3r0h3ro · poc
https://github.com/z3r0h3ro/CVE-2026-32194-POC

References (1)

Scores

CVSS v3 9.8
EPSS 0.0012
EPSS Percentile 30.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-77
Status published
Products (2)
microsoft/bing_images
Microsoft/Microsoft Bing Images -
Published Mar 19, 2026
Tracked Since Mar 20, 2026