Snowflake

Products

ProductCVEsExploitedLatest
Snowflake CLI8–Sep 17, 2026
Snowflake PHP PDO Driver5–Nov 4, 2026
Snowflake Connector for Python5–Nov 4, 2026
Snowflake JDBC Driver5–Nov 4, 2026
Snowflake JDBC Driver (FIPS)5–Nov 4, 2026
Snowflake JDBC Driver (Thin)5–Nov 4, 2026
Snowflake Node.js Driver4–Nov 4, 2026
Snowflake Libsnowflakeclient4–Nov 4, 2026
Snowflake Go Driver4–Nov 4, 2026
Snowflake ODBC Driver4–Nov 4, 2026
Snowflake Connector for .NET2–Nov 4, 2026
Terraform Provider for Snowflake1–Jul 8, 2026
Snowflake ODBC1–Apr 28, 2025
Snowflake Python APIs1–Aug 12, 2026
Snowflake Spark Connector1–Jul 14, 2026
Snowflake SQLAlchemy1–Jul 14, 2026
Snowpark Python SDK1–Jul 8, 2026
Cortex Code CLI1–Apr 16, 2026

Exploited and recent CVEs

  • CVE-2026-121925 Medium 6.6 Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver 0.6%
  • CVE-2026-121925 Medium 6.6 Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver 0.6%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-114456 Medium 6.5 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 0.2%
  • CVE-2026-92903 High 8.2 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings 0.2%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86600 High 8.2 Workload identity attestation generated before login host validation in Snowflake drivers 0.5%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%
  • CVE-2026-86597 Medium 6.5 Sensitive information written to logs by Snowflake drivers <0.1%