Microsoft Security Flaws: Bing Images RCE and AD Services

Researchers disclosed critical remote code execution vulnerabilities in Microsoft's Bing Images service (CVE-2026-32194, CVE-2026-32195) that allow crafted SVGs to execute commands as SYSTEM, plus Certighost in Active Directory Certificate Services. Multiple patches have been issued following researcher disclosures.