A 1-pixel SVG reportedly gave Bing Images SYSTEM and root access on Microsoft servers
moyix · x · 2026-07-27
A 1-pixel SVG let Bing Images run code as SYSTEM on Microsoft servers
A crafted SVG sent through Bing’s public image search reportedly reached Microsoft’s servers and executed commands with NT AUTHORITY\\SYSTEM on Windows and root on Linux.
- No login, session, or click was required.
- The report focuses on how the malicious image was able to reach a shell in the first place.
- The attached image shows Bing Images as the entry point and a server-side compromise chain.
More from Infra
- fmgo: call Apple's on-device Foundation Models from Go with no CGO and no Swift — Super_Run_8466 · 2026-09-23
- Huawei unveils Peerium architecture: nested BSP unifies million processors into one computer — Dr_Singularity · 2026-09-23
- Grok explains why DeepSeek picked DualPipe + ZeRO-1 over ZeRO-3 on 2048 H800s — TheZachMueller · 2026-09-23
- AI costs fall 47% per quarter, 4x faster than DNA sequencing: Epoch AI — daveholtz · 2026-09-23
- M5 Ultra LLM test: 4x faster prompt processing, but double the power draw — DigitalguyCH · 2026-09-23
- $500 of Dell OptiPlexes become a diskless netboot lab where AI agents can't brick the hardware — colinmcnamara · 2026-09-23