cve 2026 58595

CVE-2026-58595 covers a high-severity spoofing vulnerability in Microsoft Bing Search for iOS. Microsoft says the issue involves improper restriction of rendered user-interface layers or frames and could let an unauthenticated attacker perform spoofing over a network. The vulnerability affects Bing for iOS releases older than version 33.4.440529002 and carries a CVSS 3.1 base score of 8.1. Microsoft released the fix through the App Store on July 14, 2026. This tag page tracks the available advisory and update guidance for users and organizations deploying Bing on iPhones or iPads, with upgrading to the fixed build as the immediate remediation.