Microsoft’s Bing Blunder: Critical Vulnerabilities Exposed and Exploited!

Microsoft has tackled two critical vulnerabilities impacting Bing and Power Pages, including one actively exploited in the wild. The company assures users that no customer action is needed, as fixes are in place. So relax, but maybe keep that antivirus on speed dial, just in case!

Hot Take:

**_Microsoft: where every update is a thrilling episode of “Will Your Data Survive?” This time, Bing and Power Pages were the stars of the show, but don’t worry, if you haven’t been notified, you’re probably just a spectator in this cybersecurity thriller._**

Key Points:

– Microsoft patched two critical vulnerabilities in Bing and Power Pages.
– CVE-2025-21355 allows remote code execution in Bing without authentication.
– CVE-2025-24989 enables privilege escalation in Power Pages due to improper access control.
– One of the vulnerabilities is actively exploited in the wild.
– Microsoft has mitigated the issues and notified affected customers.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here