Tag: Nico Waisman

Critical CVEs

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITYSYSTEM on Microsoft's production image-processing workers, and as root on…

application security Bing command injection CVE-2016-3714

July 24, 2026

Cyber Companies

XBOW

XBOW is an autonomous offensive security startup that discovered and responsibly disclosed the critical Bing vulnerabilities CVE-2026-32194 and CVE-2026-32191. CISO Nico Waisman…

CVE-2026-32191 CVE-2026-32194 Nico Waisman offensive security

July 24, 2026