# Google Cloud CVEs > Google Cloud: 103 CVEs mapped to its software or packages (1 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/google-cloud/cves Last updated: 2026-10-21T13:54:43Z 103 CVEs map to Google Cloud (1 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Google Cloud](https://rewindex.com/company/google-cloud.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Google Cloud’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-21 | [CVE-2026-109619](https://rewindex.com/cve/CVE-2026-109619.md) | RCE via stale global state | 8.1 high | | | 2026-10-21 | [CVE-2026-109618](https://rewindex.com/cve/CVE-2026-109618.md) | RCE via OOM corruption | 9.8 critical | | | 2026-10-21 | [CVE-2026-111943](https://rewindex.com/cve/CVE-2026-111943.md) | Distrust compromised intermediate certificates in crypto/x509 | n/a | | | 2026-10-20 | [CVE-2026-85267](https://rewindex.com/cve/CVE-2026-85267.md) | Cross-Site WebSocket Hijacking in Google Cloud Shell | 8.7 high | | | 2026-10-14 | [CVE-2026-85298](https://rewindex.com/cve/CVE-2026-85298.md) | Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation | 7.3 high | | | 2026-09-28 | [CVE-2026-81375](https://rewindex.com/cve/CVE-2026-81375.md) | Confused Deputy in Application Integration allows Internal File Read | 8.3 high | | | 2026-09-28 | [CVE-2026-81867](https://rewindex.com/cve/CVE-2026-81867.md) | Deserialization of Untrusted Data in Application Integration allows Remote Code Execution | 9.4 critical | | | 2026-09-28 | [CVE-2026-19759](https://rewindex.com/cve/CVE-2026-19759.md) | Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution | 9.4 critical | | | 2026-09-21 | [CVE-2026-73511](https://rewindex.com/cve/CVE-2026-73511.md) | Envoy: Potential path-matching/authentication bypass when using Envoy in combination with a backend stripping per-segment path (matrix) parameters (e.g. Apache Tomcat) | 5.3 medium | | | 2026-09-21 | [CVE-2026-73553](https://rewindex.com/cve/CVE-2026-73553.md) | Envoy: RBAC Authorization Bypass via Path Parameters | 7.5 high | | | 2026-09-21 | [CVE-2026-73551](https://rewindex.com/cve/CVE-2026-73551.md) | Envoy: Path normalization does not handle dot and dotdot segments with parameters | 5.3 medium | | | 2026-09-21 | [CVE-2026-73546](https://rewindex.com/cve/CVE-2026-73546.md) | Envoy: Stored XSS in Admin Stats Interface (/stats?format=html) | 7.4 high | | | 2026-09-21 | [CVE-2026-73512](https://rewindex.com/cve/CVE-2026-73512.md) | Envoy: use-after-free in QUIC on internal redirects | 7.5 high | | | 2026-09-21 | [CVE-2026-73550](https://rewindex.com/cve/CVE-2026-73550.md) | Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy | 7.5 high | | | 2026-09-21 | [CVE-2026-73547](https://rewindex.com/cve/CVE-2026-73547.md) | Envoy ext\_authz: request \`:path\` pseudoheader dereferenced w/o null check | 7.5 high | | | 2026-09-21 | [CVE-2026-48521](https://rewindex.com/cve/CVE-2026-48521.md) | Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport\_socket\_options is null | 5.9 medium | | | 2026-09-21 | [CVE-2026-73549](https://rewindex.com/cve/CVE-2026-73549.md) | Envoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL\_DST clusters | 5.3 medium | | | 2026-09-21 | [CVE-2026-73513](https://rewindex.com/cve/CVE-2026-73513.md) | Envoy: oghttp2 upstream trailers incorrect handling | 7.5 high | | | 2026-09-21 | [CVE-2026-73552](https://rewindex.com/cve/CVE-2026-73552.md) | Envoy: HTTP RBAC safe\_regex can fail open on RFC-valid obs-text header values | 7.5 high | | | 2026-09-21 | [CVE-2026-73548](https://rewindex.com/cve/CVE-2026-73548.md) | Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool | 7.5 high | | | 2026-09-21 | [CVE-2026-50572](https://rewindex.com/cve/CVE-2026-50572.md) | Envoy: ext\_authz - RawHttpClientImpl onSuccess 0x0 segfault | 5.9 medium | | | 2026-09-15 | [CVE-2026-19407](https://rewindex.com/cve/CVE-2026-19407.md) | GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK | 7.7 high | | | 2026-09-11 | [CVE-2026-19486](https://rewindex.com/cve/CVE-2026-19486.md) | SSRF in Gemini Enterprise Agent Platform App Builder | 8.7 high | | | 2026-09-10 | [CVE-2026-13745](https://rewindex.com/cve/CVE-2026-13745.md) | Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI\_CLI\_HOME | 7.7 high | | | 2026-09-09 | [CVE-2026-79696](https://rewindex.com/cve/CVE-2026-79696.md) | Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist | 10.0 critical | | | 2026-09-04 | [CVE-2026-4644](https://rewindex.com/cve/CVE-2026-4644.md) | Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover | 8.5 high | | | 2026-09-04 | [CVE-2026-79707](https://rewindex.com/cve/CVE-2026-79707.md) | Arbitrary File Read in Google Agent Development Kit (ADK) | 8.7 high | | | 2026-08-31 | [CVE-2026-19410](https://rewindex.com/cve/CVE-2026-19410.md) | Google Cloud Build Comment Control Bypass via Webhook Suppression | 9.4 critical | | | 2026-08-26 | [CVE-2026-19485](https://rewindex.com/cve/CVE-2026-19485.md) | Bucket Squatting in Vertex AI Search for Commerce | 9.3 critical | | | 2026-08-26 | [CVE-2026-12717](https://rewindex.com/cve/CVE-2026-12717.md) | Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection | 9.4 critical | | | 2026-08-22 | [CVE-2026-12710](https://rewindex.com/cve/CVE-2026-12710.md) | Missing Authorization in Application Integration QueryEngineTask | 9.3 critical | | | 2026-07-30 | [CVE-2026-59310](https://rewindex.com/cve/CVE-2026-59310.md) | vCenter directory-traversal vulnerability | 9.8 critical | yes (2026-08-18) | | 2026-08-17 | [CVE-2026-15623](https://rewindex.com/cve/CVE-2026-15623.md) | Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service | 9.4 critical | | | 2026-08-11 | [CVE-2026-20901](https://rewindex.com/cve/CVE-2026-20901.md) | | 5.3 medium | | | 2026-08-11 | [CVE-2025-35973](https://rewindex.com/cve/CVE-2025-35973.md) | | 4.5 medium | | | 2026-08-11 | [CVE-2025-31938](https://rewindex.com/cve/CVE-2025-31938.md) | | 4.3 medium | | | 2026-08-11 | [CVE-2025-31356](https://rewindex.com/cve/CVE-2025-31356.md) | | 5.6 medium | | | 2026-08-11 | [CVE-2026-20898](https://rewindex.com/cve/CVE-2026-20898.md) | | 7.2 high | | | 2026-08-11 | [CVE-2026-20885](https://rewindex.com/cve/CVE-2026-20885.md) | | 7.2 high | | | 2026-08-11 | [CVE-2026-20775](https://rewindex.com/cve/CVE-2026-20775.md) | | 5.3 medium | | | 2026-08-11 | [CVE-2026-20713](https://rewindex.com/cve/CVE-2026-20713.md) | | 4.5 medium | | | 2026-08-11 | [CVE-2026-20705](https://rewindex.com/cve/CVE-2026-20705.md) | | 5.3 medium | | | 2026-08-11 | [CVE-2026-6726](https://rewindex.com/cve/CVE-2026-6726.md) | An information leakage vulnerability in the TCG TPM 2.0 reference code. | 7.9 high | | | 2026-08-05 | [CVE-2026-15587](https://rewindex.com/cve/CVE-2026-15587.md) | Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header | 9.4 critical | | | 2026-08-04 | [CVE-2026-64561](https://rewindex.com/cve/CVE-2026-64561.md) | KVM: x86: Check for invalid/obsolete root \*after\* making MMU pages available | 8.8 high | | | 2026-07-30 | [CVE-2026-41709](https://rewindex.com/cve/CVE-2026-41709.md) | ESX insufficient logging vulnerability | 2.7 low | | | 2026-07-30 | [CVE-2026-41703](https://rewindex.com/cve/CVE-2026-41703.md) | Out-of-bounds read vulnerability | 7.6 high | | | 2026-07-30 | [CVE-2026-47876](https://rewindex.com/cve/CVE-2026-47876.md) | VMXNET3 out-of-bounds write vulnerability | 9.3 critical | | | 2026-07-30 | [CVE-2026-59309](https://rewindex.com/cve/CVE-2026-59309.md) | vCenter authentication-bypass vulnerability | 9.8 critical | | | 2026-07-24 | [CVE-2026-15810](https://rewindex.com/cve/CVE-2026-15810.md) | Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover | 8.7 high | | Next page: [page 2](https://rewindex.com/company/google-cloud/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Google Cloud) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-10 | 0 | 4 | 0 | 0 | 0 | 0 | | 2025-11-17 | 1 | 1 | 1 | 0 | 0 | 0 | | 2025-11-24 | 0 | 4 | 0 | 0 | 0 | 0 | | 2025-12-01 | 0 | 2 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 3 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 0 | 1 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 3 | 0 | 0 | 0 | 0 | | 2026-02-23 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-03-02 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-13 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-04-20 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 2 | 0 | 0 | 0 | 0 | 0 | | 2026-05-18 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-25 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-08 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-06-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-22 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-06-29 | 2 | 2 | 2 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-07-13 | 1 | 1 | 0 | 0 | 0 | 0 | | 2026-07-20 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-07-27 | 3 | 1 | 0 | 1 | 0 | 0 | | 2026-08-03 | 1 | 1 | 0 | 0 | 0 | 0 | | 2026-08-10 | 0 | 3 | 7 | 0 | 0 | 0 | | 2026-08-17 | 2 | 0 | 0 | 0 | 0 | 1 | | 2026-08-24 | 2 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 1 | 2 | 0 | 0 | 0 | 0 | | 2026-09-07 | 1 | 2 | 0 | 0 | 0 | 0 | | 2026-09-14 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 8 | 5 | 0 | 0 | 0 | | 2026-09-28 | 2 | 1 | 0 | 0 | 0 | 0 | | 2026-10-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-12 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-10-19 | 1 | 2 | 0 | 0 | 1 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/google-cloud/cves · Markdown: https://rewindex.com/company/google-cloud/cves.md · JSON: https://rewindex.com/api/v1/companies/google-cloud/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:01:54.429Z