SearchLeak CVE-2026-42824: Bing searchbyimage imgurl Exfil via Copilot Race Condition

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects network requests to Google image search containing an 'imgurl' parameter, which can be used by an attacker to exfiltrate data by forcing an external service to crawl a controlled URL containing sensitive information.