Affected Systems

Microsoft Bing Images service (CVE-2026-32194 and CVE-2026-32191). Affected Microsoft's production image-processing workers running Windows Server 2022 Datacenter and Linux. Both vulnerabilities rated CVSS 9.8 (Critical). No customer-side products affected—server-side only.

Exploitation Status

No active exploitation recorded by Microsoft as of July 24, 2026. XBOW discovered and privately reported both vulnerabilities. Microsoft patched server-side before March 2026 advisory publication. Exploit mechanics publicly disclosed by XBOW on July 23, 2026, after Microsoft-requested embargo. Proof-of-concept demonstrated command execution as NT AUTHORITY\SYSTEM (Windows) and root (Linux).

Business Impact

Microsoft has already remediated both vulnerabilities server-side. No customer action required for Bing users. However, the attack vector—crafted SVG files exploiting ImageMagick delegate command injection—remains relevant for organizations running similar image-processing pipelines. Any service accepting untrusted image uploads or fetching remote images through ImageMagick or compatible libraries with delegates enabled faces identical risk. The vulnerability allowed unauthenticated remote command execution with maximum privileges, representing complete server compromise.

Urgency

🟡 Within a week

Recommended Actions

  • Audit all image-processing pipelines using ImageMagick or compatible libraries: disable delegates entirely in policy.xml with ''
  • Restrict accepted image formats to raster-only (JPEG, PNG, WebP); block vector formats (SVG, MVG, EPS) that support external references or embedded interpreters
  • Review delegates.xml and disable all unnecessary delegate handlers; verify active policy with 'magick identify -list policy'
  • Isolate image-processing workers: run with least privilege (not root/SYSTEM), block outbound network access, and deploy in sandboxed containers
  • Implement allowlist-based URL validation for server-side image fetches; block internal IP ranges (RFC 1918, link-local) to prevent SSRF escalation