Google Cloud Looker

• CVE-2026-15810 High 8.7 Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover 0.5%
• CVE-2025-12742 High 7.5 Remote Code Execution in Looker via Teradata JDBC Driver 0.3%
• CVE-2025-12741 High 7.7 Arbitrary File Write in Denodo dialect of Looker allows Remote Code Execution 0.3%
• CVE-2025-12740 High 7.7 Remote Command Execution in Looker via IBM DB2 JDBC drive 0.3%
• CVE-2025-12739 High 7.3 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise 0.3%
• CVE-2025-12414 Critical 9.2 Looker account compromise via punycode homograph attack 0.4%
• CVE-2025-12743 Medium 6.0 SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database 0.3%
• CVE-2025-12472 High 7.1 Remote Code Execution in Looker due to Improperly Validated Directory Deletion 0.3%
• CVE-2025-12155 High 7.1 Command Injection in Looker 1.3%
• CVE-2024-5166 Medium 6.5 Insecure Direct Object Reference In Looker 0.2%