CVE-2026-58595: Microsoft Bing App for IOS Spoofing Vulnerability
Published Jul 14, 2026
·Updated
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
Other sources
Microsoft Bing App for IOS Spoofing Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Bing Search for iOS<33.4.440529002
33.4.440529002
Microsoft Bing Search Iphone Os<33.4.440529002
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 33.4.440529002
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-58595?
The severity of CVE-2026-58595 is rated high with a score of 8.1.
2
How do I fix CVE-2026-58595?
To fix CVE-2026-58595, ensure that you update the Microsoft Bing App for iOS to the latest version provided by Microsoft.
3
What type of attack is possible with CVE-2026-58595?
CVE-2026-58595 allows an unauthorized attacker to perform spoofing attacks over a network.
4
Which software is affected by CVE-2026-58595?
CVE-2026-58595 affects the Microsoft Bing Search app for iOS.
5
When was CVE-2026-58595 published?
CVE-2026-58595 was published on July 14, 2026.