Microsoft Bing
8 CVEs affecting Microsoft Bing. Latest disclosed: 2026-06-09. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33819 | Critical | 10.0 | 2026-04-23 | Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. |
CVE-2026-32186 | Critical | 10.0 | 2026-04-03 | Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-21355 | High | 8.6 | 2025-02-19 | Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network |
CVE-2026-26120 | Medium | 6.5 | 2026-03-19 | Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network. |
CVE-2020-1329 | Medium | 6.5 | 2020-06-09 | A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing Vulnerabil… |
CVE-2021-33753 | Medium | 4.7 | 2021-07-14 | Microsoft Bing Search Spoofing Vulnerability |
CVE-2026-45650 | Medium | 4.3 | 2026-06-09 | User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network. |
CVE-2014-1670 | | 2014-01-25 | The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response. |