Technology · Google
Google Cloud Platform vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 43 vulnerabilities in Google Cloud Platform: 2 in the last 7 days and 22 in the last 90 days, 4 of them critical and 3 exploited in the wild. The most recent, CVE-2024-36350, was published on 10 November 2026. 10 vulnerabilities in the last four weeks, up 100% on the four before (5). 2 critical against 0, 2 exploited in the wild against 0.
- Last 7 days
- 2
- Last 90 days
- 22
- Critical, all time
- 4
- Exploited in the wild
- 3
About Google Cloud Platform
Google Cloud Platform is a cloud computing service providing infrastructure, compute, storage, and managed services.
Latest Google Cloud Platform vulnerabilities
- CVE-2024-36350: AMD EPYC 5th generation processor data cache information leakhigh
- CVE-2026-31836: Istio authentication bypass or access control vulnerabilityhigh
- CVE-2026-65107: Slurm multiple vulnerabilities in Cluster ToolkithighCVSS 6.3
- CVE-2026-93327: Google Application Integration deserialization of untrusted data in SubWorkflowhigh
- CVE-2026-85299: Google Compute Engine incorrect authorization in disk accesshigh
- CVE-2026-111497: Google Brotli buffer overflow in decodercriticalexploited in the wildCVSS 4EPSS 82.6%
- CVE-2026-109618: PHP Memory Corruption Vulnerabilitycriticalexploited in the wildEPSS 100.0%
- CVE-2026-111943: Go crypto/x509 untrusted intermediate certificate validationhighEPSS 0.1%
- Istio and Envoy Proxy security vulnerabilitiesinfo
- CVE-2026-98432: Linux kernel ipv4 use-after-free in TCP option handlinghighEPSS 0.2%
- CVE-2026-85298: Google Cloud Application Integration privilege escalation in AuthConfighighEPSS 0.4%
- Envoy Proxy denial-of-service in HTTP filter with prefix_rewriteinfo
- CVE-2026-81867: Google Cloud Application Integration JavaScript Task deserialization of untrusted datahigh
- CVE-2026-81375: Google Cloud Application Integration Confused Deputy in Email Taskhigh
- CVE-2026-19759: Google Application Integration incorrect authorization in task configurationhigh
- CVE-2026-73513: Envoy Proxy multiple vulnerabilitieshighCVSS 7.5EPSS 0.7%
- CVE-2026-15587: Google Security Operations SOAR privilege escalation via authentication headerhigh
- containerd CRI security context bypass in checkpoint restoreinfo
- CVE-2026-4644: Google Cloud Integration Connectors HTTP missing authorizationhighEPSS 0.4%
- Google GKE Multi-Cloud authorization bypass in cluster registration APIsinfo
- CVE-2026-12717: Google BigQuery Data Transfer Service JDBC driver input validation bypasshighEPSS 0.4%
- Next.js and libheif RCE in HEIF/AVIF image processinginfoCVSS 9.8
- CVE-2025-31938: Intel TDX firmware confidential VM escapehighEPSS 0.1%
- CVE-2026-6726: Trusted Computing Group TPM 2.0 reference implementation memory corruptionhighCVSS 7.9EPSS 0.2%
- CVE-2026-64561: Linux KVM x86 shadow MMU privilege escalationhighCVSS 8.8EPSS 0.4%
Most severe Google Cloud Platform vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-46300: Linux Kernel out-of-bounds write in skbuff coalescingcriticalexploited in the wildCVSS 7.8EPSS 10.2%
- CVE-2026-111497: Google Brotli buffer overflow in decodercriticalexploited in the wildCVSS 4EPSS 82.6%
- CVE-2026-109618: PHP Memory Corruption Vulnerabilitycriticalexploited in the wildEPSS 100.0%
- CVE-2026-59309: VMware vCenter authentication bypass in VMware Directory ServicecriticalCVSS 9.8
- CVE-2026-14934: Google Cloud BigQuery and Dataform auth bypass in repository creationhighCVSS 9.4
- CVE-2026-2264: Google Cloud Apigee SSRF in SetIntegrationRequest policyhighCVSS 9.2
- CVE-2026-64561: Linux KVM x86 shadow MMU privilege escalationhighCVSS 8.8EPSS 0.4%
- CVE-2026-15810: Google Cloud Looker XSS leading to administrative account takeoverhighCVSS 8.7
- CVE-2026-12715: Google Cloud Firebase Studio missing authorization in GetSignedGcsUrl RPChighCVSS 8.5
- CVE-2026-6726: Trusted Computing Group TPM 2.0 reference implementation memory corruptionhighCVSS 7.9EPSS 0.2%
Vulnerabilities per week
10 vulnerabilities in the last four weeks, up 100% on the four before (5). 2 critical against 0, 2 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 2 | 0 | |
| 31 Aug 2026 | 2 | 0 | |
| 7 Sep 2026 | 1 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 1 | 0 | |
| 28 Sep 2026 | 3 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 3 | 0 | |
| 19 Oct 2026 | 4 | 2 | |
| 26 Oct 2026 | 2 | 0 | |
| 2 Nov 2026 | 1 | 0 | |
| 9 Nov 2026 | 2 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Google Cloud Platform vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/google-cloud-platform)<a href="https://junglewise.ai/threats/technologies/google-cloud-platform"><img src="https://junglewise.ai/threats/technologies/google-cloud-platform/badge.svg" alt="Google Cloud Platform vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/google-cloud-platform.json, and this page as text at https://junglewise.ai/threats/technologies/google-cloud-platform.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Google Cloud Platform vulnerabilities", https://junglewise.ai/threats/technologies/google-cloud-platform, 12 November 2026.