Server‑Side Request Forgery (SSRF) in Microsoft Bing allows an unauthorized attacker to send requests from the server to internal or external resources, thereby enabling privilege escalation on the system.

Microsoft Bing is the only vendor and product identified as affected, with no specific version information provided in the CNA data. Administrators should treat all current installations as potentially vulnerable until a patch is applied.

The CVSS score of 10 indicates a critical severity. EPSS is below 1 %, and the vulnerability is not listed in the CISA KEV catalog, suggesting a comparatively low current exploitation probability. Based on the description, the likely attack vector is through a network‑based SSRF opportunity that could be leveraged to access privileged internal services, although the exact path is not detailed in the advisories.