AI Security
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
Critical SVG vulnerabilities in Bing's image tier enabled arbitrary command execution with system-level privileges.
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so ...
THN
The Hacker News
Source
The Hacker News
AI Analysis
Generated insight by OnAirToday AI
This vulnerability highlights the severe risks inherent in processing user-submitted image files within cloud-native architectures. It underscores the critical need for robust sandboxing and strict input sanitization to prevent attackers from escalating privileges deep into core infrastructure.
Powered by AI • Not a substitute for human analysisMore Insights →
Share
Filed under:AI Security
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.