Description
Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Bing Images | - | — |
Advisories 1
- MSRC-CVE-2026-32191 Microsoft Bing Images Remote Code Execution Vulnerability Microsoft Security Response Center · Mar 19, 2026
References
- Microsoft Bing Images Remote Code Execution Vulnerability vendor-advisory patch