The vulnerability CVE-2026-58595 affects Microsoft Bing Search for iOS version 1.0 and is categorized under CWE-1021, which concerns improper restriction of rendered UI layers or frames. This weakness enables an attacker without privileges to conduct spoofing attacks over a network by manipulating the app's UI rendering. The CVSS 3.1 base score is 8.1, reflecting high severity with network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, high integrity and availability impact, and official remediation available. Microsoft has published an official fix for this vulnerability.

An attacker can exploit this vulnerability remotely without privileges to perform UI spoofing, which can deceive users and potentially lead to further malicious actions affecting the integrity and availability of the application. There is no direct confidentiality impact reported. No known exploits are currently observed in the wild.

An official fix is available from Microsoft. Users and administrators should apply the patch provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595 to remediate this vulnerability.