GoogleCloud

Latest CVEs · RSS

• CVE-2026-85298 2026-10-14 · CVSS 7.3
  An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior t
• CVE-2026-81375 2026-09-28 · CVSS 8.3
  A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows
• CVE-2026-81867 2026-09-28 · CVSS 9.4
  A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Pl
• CVE-2026-19759 2026-09-28 · CVSS 9.4
  An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform
• CVE-2026-19407 2026-09-15 · CVSS 7.7
  Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (
• CVE-2026-19486 2026-09-11 · CVSS 8.7
  A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Pla
• CVE-2026-13745 2026-09-10 · CVSS 7.7
  A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within
• CVE-2026-79696 2026-09-09 · CVSS 10.0
  A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GK
• CVE-2026-4644 2026-09-04 · CVSS 8.5
  A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an a
• CVE-2026-79707 2026-09-04 · CVSS 8.7
  A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthentic
• CVE-2026-19410 2026-08-31 · CVSS 9.4
  An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote at
• CVE-2026-19485 2026-08-26 · CVSS 9.3
  A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud
• CVE-2026-12717 2026-08-26 · CVSS 9.4
  An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Googl
• CVE-2026-12710 2026-08-22 · CVSS 9.3
  A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external
• CVE-2026-15623 2026-08-17 · CVSS 9.4
  A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform
• CVE-2026-15587 2026-08-05 · CVSS 9.4
  Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate p
• CVE-2026-15810 2026-07-24 · CVSS 8.7
  A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7
• CVE-2026-12715 2026-07-17 · CVSS 8.5
  Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed
• CVE-2026-14934 2026-07-13 · CVSS 9.4
  A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between
• CVE-2026-12879 2026-07-09 · CVSS 5.9
  An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated
• CVE-2026-12537 2026-06-24 · CVSS 10.0
  Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versio
• CVE-2026-8934 2026-06-22 · CVSS 6.9
  A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote
• CVE-2026-4764 2026-06-11 · CVSS 9.4
  A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific
• CVE-2026-2264 2026-05-26 · CVSS 9.2
  A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate se
• CVE-2026-2031 2026-05-15 · CVSS 10.0
  An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthe