SecurityThe Hacker Newsabout 4 hours ago
Bing SVG Flaws Let Attackers Run Commands as SYSTEM
1 min read
Crafted SVGs submitted to Bing image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production workers and as root on Linux machines. XBOW found the bugs, reported them privately, and Microsoft issued two critical CVEs rated 9.8. The fix was applied server-side before March advisories, with no customer action required.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
