CVE-2025-21355: Microsoft Bing

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network

Affected products

• Microsoft Bing: any version

Published 2025-02-19. Last modified 2026-06-17.