Log in Start free

Google Cloud

Products

ProductCVEsExploitedLatest
Looker10–Jul 24, 2026
Application Integration7–Oct 30, 2026
Looker Studio3–Nov 10, 2025
Agent Development Kit (ADK)2–Sep 4, 2026
Apigee-X2–May 26, 2026
BigQuery2–Jul 13, 2026
Dataform2–Jul 13, 2026
Dialogflow CX2–Jun 11, 2026
Gemini CLI2–Sep 10, 2026
Google SecOps (Chronicle SOAR)2–Aug 17, 2026
Cloud Build1–Mar 3, 2026
Cloud Console UIs1–Jun 22, 2026
Cloud Data Fusion1–Dec 10, 2025
Cloud Run MCP1–Oct 26, 2026
Cloud Shell1–Oct 20, 2026
Colab Enterprise1–Jul 13, 2026
Compute Engine1–Oct 27, 2026
Vertex AI SDK for Python1–Feb 20, 2026
Vertex AI Search for Commerce1–Aug 26, 2026
Dialogflow CX Messenger1–Dec 18, 2025
Firebase Studio1–Jul 17, 2026
Vertex AI: Self-Deployed Models1–Oct 22, 2025
Gemini Enterprise Agent Platform App Builder1–Sep 11, 2026
Gemini Enterprise Agent Platform SDK for Python1–Sep 15, 2026
Gemini Enterprise (formerly Agentspace)1–Feb 6, 2026
Google Cloud Build1–Aug 31, 2026
Google Cloud SecOps SOAR1–Dec 9, 2025
Vertex AI Workbench1–Feb 26, 2026
Google SecOps SOAR1–Sep 11, 2025
Identity Platform and Firebase Authentication1–Oct 30, 2026
Integration Connectors1–Sep 4, 2026
Internal Integration Platform APIs1–May 15, 2026
AlloyDB for PostgreSQL1–May 12, 2026
Agent Development Kit (ADK) for Python1–Sep 9, 2026
MCP Toolbox for Databases (googleapis/mcp-toolbox)1–Oct 26, 2026
Migrate to Containers1–Oct 16, 2024
run-gemini-cli GitHub Action1–Jun 24, 2026
Vertex AI Experiments1–Feb 20, 2026
Apigee hybrid Javacallout policy1–Dec 5, 2025
Vertex AI: Open Models for MaaS1–Oct 22, 2025
Apigee1–Jul 9, 2026
Vertex AI: Partner Models for MaaS1–Oct 22, 2025
BigQuery Data Transfer Service1–Aug 26, 2026
Classic Application Load Balancer1–May 16, 2025

Exploited and recent CVEs

  • CVE-2026-93327 Critical 9.4 Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution 0.4%
  • CVE-2026-85268 High 8.7 Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID 0.6%
  • CVE-2026-85299 High 8.3 Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration 0.3%
  • CVE-2026-85297 High 7.7 Bucket Squatting in Cloud Run MCP leads to Service Account Takeover 0.3%
  • CVE-2026-93328 Critical 9.3 Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write 0.5%
  • CVE-2026-85267 High 8.7 Cross-Site WebSocket Hijacking in Google Cloud Shell 0.2%
  • CVE-2026-85298 High 7.3 Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation 0.4%
  • CVE-2026-81375 High 8.3 Confused Deputy in Application Integration allows Internal File Read 0.3%
  • CVE-2026-81867 Critical 9.4 Deserialization of Untrusted Data in Application Integration allows Remote Code Execution 0.4%
  • CVE-2026-19759 Critical 9.4 Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution 0.2%
  • CVE-2026-19407 High 7.7 GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK 0.7%
  • CVE-2026-19486 High 8.7 SSRF in Gemini Enterprise Agent Platform App Builder 0.4%
  • CVE-2026-13745 High 7.7 Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME 0.7%
  • CVE-2026-79696 Critical 10.0 Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist 0.7%
  • CVE-2026-4644 High 8.5 Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover 0.4%
  • CVE-2026-79707 High 8.7 Arbitrary File Read in Google Agent Development Kit (ADK) 0.7%
  • CVE-2026-19410 Critical 9.4 Google Cloud Build Comment Control Bypass via Webhook Suppression 0.2%
  • CVE-2026-19485 Critical 9.3 Bucket Squatting in Vertex AI Search for Commerce 0.4%
  • CVE-2026-12717 Critical 9.4 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection 0.6%
  • CVE-2026-12710 Critical 9.3 Missing Authorization in Application Integration QueryEngineTask 0.4%
  • CVE-2026-15623 Critical 9.4 Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service 0.3%
  • CVE-2026-15587 Critical 9.4 Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header 0.2%
  • CVE-2026-15810 High 8.7 Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover 0.5%
  • CVE-2026-12715 High 8.5 Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft 0.4%
  • CVE-2026-14934 Critical 9.4 Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise 0.4%
  • CVE-2026-14934 Critical 9.4 Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise 0.4%
  • CVE-2026-14934 Critical 9.4 Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise 0.4%
  • CVE-2026-12879 Medium 5.9 Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy 0.3%
  • CVE-2026-12537 Critical 10.0 Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows 0.2%
  • CVE-2026-12537 Critical 10.0 Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows 0.2%