Snowflake
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Snowflake CLI | 8 | – | Sep 17, 2026 |
| Snowflake PHP PDO Driver | 5 | – | Nov 4, 2026 |
| Snowflake Connector for Python | 5 | – | Nov 4, 2026 |
| Snowflake JDBC Driver | 5 | – | Nov 4, 2026 |
| Snowflake JDBC Driver (FIPS) | 5 | – | Nov 4, 2026 |
| Snowflake JDBC Driver (Thin) | 5 | – | Nov 4, 2026 |
| Snowflake Node.js Driver | 4 | – | Nov 4, 2026 |
| Snowflake Libsnowflakeclient | 4 | – | Nov 4, 2026 |
| Snowflake Go Driver | 4 | – | Nov 4, 2026 |
| Snowflake ODBC Driver | 4 | – | Nov 4, 2026 |
| Snowflake Connector for .NET | 2 | – | Nov 4, 2026 |
| Terraform Provider for Snowflake | 1 | – | Jul 8, 2026 |
| Snowflake ODBC | 1 | – | Apr 28, 2025 |
| Snowflake Python APIs | 1 | – | Aug 12, 2026 |
| Snowflake Spark Connector | 1 | – | Jul 14, 2026 |
| Snowflake SQLAlchemy | 1 | – | Jul 14, 2026 |
| Snowpark Python SDK | 1 | – | Jul 8, 2026 |
| Cortex Code CLI | 1 | – | Apr 16, 2026 |
Exploited and recent CVEs
- CVE-2026-121925 Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver 0.6%
- CVE-2026-121925 Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver 0.6%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
- CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings 0.2%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%
- CVE-2026-86597 Sensitive information written to logs by Snowflake drivers <0.1%