XBOW Agents Discover Three RCE Vulnerabilities in Bing Image Search with SYSTEM and Root Privileges
cybersecurityvulnerabilityRCEBingWindowsLinuxprivilege_escalation
XBOW Agents found three RCEs as SYSTEM (and root) on Bing Image Search. The vulnerabilities were discovered in Bing Image Search and allowed remote code execution (RCE) with SYSTEM privileges on Windows and root privileges on Linux. The findings were published in a blog post by XBOW. No additional technical details about the exploits were provided in the Reddit post.