A 1-pixel SVG reportedly gave Bing Images SYSTEM and root access on Microsoft servers
moyix · x · 2026-07-27
A 1-pixel SVG let Bing Images run code as SYSTEM on Microsoft servers
A crafted SVG sent through Bing’s public image search reportedly reached Microsoft’s servers and executed commands with NT AUTHORITY\\SYSTEM on Windows and root on Linux.
- No login, session, or click was required.
- The report focuses on how the malicious image was able to reach a shell in the first place.
- The attached image shows Bing Images as the entry point and a server-side compromise chain.
More from Infra
- LightRAG v1.5.3 adds a one-time Milvus migration and hardens production edge cases — JeremyCMorgan · 2026-07-28
- llama.cpp adds DSpark speculative decoding and asks for speed results — pmttyji · 2026-07-28
- Nvidia puts an open vision-language-action model on Hugging Face — theteknosaur · 2026-07-28
- “Model eats harness” is really about deployment-driven harness evolution — m_wulfmeier · 2026-07-28
- Agentic AI system reportedly cost $1.2M a month before being cut to $100K — emmanuelvivier · 2026-07-28
- Wistron’s Early Nvidia Bet Turned It Into One of AI’s Biggest Supply-Chain Winners — pstAsiatech · 2026-07-28