Google Cloud Security Bulletins
Google Cloud Platform security advisories.
77 advisories tracked · showing 77
- Nov 10, 2026GCP-2026-081MediumCVE-2024-36350, CVE-2024-36357 +1
GCP-2026-081 — Published: 2026-11-10Description Description Severity Notes AMD has disclosed three vulnerabilities that affect 5th generation AMD EPYC…
- Nov 9, 2026GCP-2026-080HighCVE-2026-31836
GCP-2026-080 — Published: 2026-11-09Updated: 2026-11-12Description Description Severity Notes Security vulnerabilities were discovered in Istio…
- Nov 5, 2026GCP-2026-079CriticalCVE-2026-111497
GCP-2026-079 — Published: 2026-11-05Description Description Severity Notes Per advisory VMSA-2026-0008, Broadcom has identified an out-of-bounds write…
- Nov 4, 2026GCP-2026-078MediumCVE-2026-98432
GCP-2026-078 — Published: 2026-11-04Description Description Severity Notes A vulnerability (CVE-2026-98432) was discovered in the Linux kernel IPv4 TCP…
- Nov 3, 2026GCP-2026-077MediumCVE-2026-111943, CVE-2026-91403
GCP-2026-077 — Published: 2026-11-03Description Description Severity Notes Following the private-key compromise of intermediate Certificate Authorities…
- Nov 2, 2026GCP-2026-076MediumCVE-2026-111943
GCP-2026-076 — Published: 2026-11-02Description Description Severity Notes A security vulnerability was discovered in Istio (ISTIO-SECURITY-2026-008). For…
- Nov 2, 2026GCP-2026-075MediumCVE-2026-111943
GCP-2026-075 — Published: 2026-11-02Description Description Severity Notes On Saturday, October 17, 2026, Google received a report from a security…
- Oct 28, 2026GCP-2026-074CriticalCVE-2026-93327
GCP-2026-074 — Published: 2026-10-28Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the…
- Oct 26, 2026GCP-2026-073HighCVE-2026-85299
GCP-2026-073 — Published: 2026-10-26Description Description Severity Notes An incorrect authorization vulnerability was discovered in Compute Engine prior…
- Oct 24, 2026GCP-2026-072CriticalCVE-2026-109618, CVE-2026-109619
GCP-2026-072 — Published: 2026-10-24Description Description Severity Notes Two vulnerabilities in PHP core, CVE-2026-109618 and…
- Oct 23, 2026GCP-2026-071MediumCVE-2026-111943
GCP-2026-071 — Published: 2026-10-23Updated: 2026-11-02Description Description Severity Notes 2026-11-02 Update: Added Google Cloud SDK Libraries to the…
- Oct 21, 2026GCP-2026-070CriticalCVE-2026-109618, CVE-2026-109619
GCP-2026-070 — Published: 2026-10-21Updated: 2026-10-28Description Description Severity Notes 2026-10-28 Update: For Cloud Run, Cloud Run functions,…
- Oct 19, 2026GCP-2026-069No CVE ID
GCP-2026-069 — Published: 2026-10-19Description Description Severity Notes Security vulnerabilities were discovered in Istio and Envoy Proxy…
- Oct 14, 2026GCP-2026-068HighCVE-2026-85298
GCP-2026-068 — Published: 2026-10-14Updated: 2026-11-05Description Description Severity Notes An Incorrect Authorization vulnerability in the…
- Oct 12, 2026GCP-2026-067HighNo CVE ID
GCP-2026-067 — Published: 2026-10-12Description Description Severity Notes A Denial-of-Service (DoS) vulnerability was discovered in Envoy Proxy when an…
- Sep 28, 2026GCP-2026-064CriticalCVE-2026-19759
GCP-2026-064 — Published: 2026-09-28Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the…
- Sep 28, 2026GCP-2026-065CriticalCVE-2026-81867
GCP-2026-065 — Published: 2026-09-28Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the…
- Sep 28, 2026GCP-2026-066HighCVE-2026-81375
GCP-2026-066 — Published: 2026-09-28Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in…
- Sep 16, 2026GCP-2026-063CriticalCVE-2026-15587
GCP-2026-063 — Published: 2026-09-16Description Description Severity Notes An Improper Privilege Management vulnerability in Google Security Operations…
- Sep 11, 2026GCP-2026-062HighCVE-2026-65108, CVE-2026-65165 +6
GCP-2026-062 — Published: 2026-09-11Description Description Severity Notes Multiple security vulnerabilities were discovered in Slurm that affect Cluster…
- Sep 9, 2026GCP-2026-061MediumNo CVE ID
GCP-2026-061 — Published: 2026-09-09Description Description Severity Notes A security vulnerability (GHSA-p7v4-vr35-mj6f, CVE assignment pending) in…
- Sep 4, 2026GCP-2026-060HighCVE-2026-65107
GCP-2026-060 — Published: 2026-09-04Updated: 2026-09-08Description Description Severity Notes 2026-09-08 Update: Added link to the Cluster Toolkit…
- Sep 4, 2026GCP-2026-059HighCVE-2026-4644
GCP-2026-059 — Published: 2026-09-04Description Description Severity Notes A Missing Authorization vulnerability was discovered in the HTTP Connector in…
- Sep 2, 2026GCP-2026-058CriticalNo CVE ID
GCP-2026-058 — Published: 2026-09-02Description Description Severity Notes A missing project permission check in GKE Multi-Cloud (CreateAttachedCluster,…
- Aug 26, 2026GCP-2026-057CVE-2026-73550, CVE-2026-73553 +11
GCP-2026-057 — Published: 2026-08-26Description Description Severity Notes A series of vulnerabilities were discovered in Envoy Proxy. For instructions…
- Aug 26, 2026GCP-2026-056CriticalCVE-2026-12717
GCP-2026-056 — Published: 2026-08-26Description Description Severity Notes An Improper Input Validation vulnerability was discovered in the JDBC driver in…
- Aug 25, 2026GCP-2026-055HighNo CVE ID
GCP-2026-055 — Published: 2026-08-25Description Description Severity Notes A critical unauthenticated Remote Code Execution (RCE) vulnerability exists in…
- Aug 11, 2026GCP-2026-054HighCVE-2026-6726
GCP-2026-054 — Published: 2026-08-11Description Description Severity Notes A vulnerability (CVE-2026-6726, also known as TCGVRT0010) has been identified…
- Aug 10, 2026GCP-2026-053HighCVE-2026-20713, CVE-2026-20705 +7
GCP-2026-053 — Published: 2026-08-11Description Description Severity Notes Google is aware of several security vulnerabilities affecting Intel® Trust…
- Aug 7, 2026GCP-2026-052CVE-2026-64561
GCP-2026-052 — Published: 2026-08-07Description Description Severity Notes A security vulnerability has been identified in the Kernel-based Virtual…
- Jul 31, 2026GCP-2026-051HighCVE-2026-50195, CVE-2026-53488 +3
GCP-2026-051 — Published: 2026-07-31Description2026-08-04 Update: The VMware patch release version is 1.33.1200, not 1.33.1100 as stated in the initial…
- Jul 29, 2026GCP-2026-050CriticalCVE-2026-59309, CVE-2026-59310 +3
GCP-2026-050 — Published: 2026-07-29Description Description Severity Notes Per advisory VMSA-2026-0006, multiple vulnerabilities in VMware ESXi, and…
- Jul 22, 2026GCP-2026-049HighCVE-2026-15810
GCP-2026-049 — Published: 2026-07-22Description Description Severity Notes A reflected Cross-Site Scripting (XSS) vulnerability was discovered in Google…
- Jul 13, 2026GCP-2026-047CriticalCVE-2026-14934
GCP-2026-047 — Published: 2026-07-13Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in…
- Jul 13, 2026GCP-2026-048MediumNo CVE ID
GCP-2026-048 — Published: 2026-07-13Description Description Severity Notes A privilege escalation vulnerability was addressed in Developer Connect.
- Jul 7, 2026GCP-2026-045HighNo CVE ID
GCP-2026-045 — Published: 2026-06-29Description Description Severity Notes A vulnerability was detected in Envoy Proxy where blocked QPACK decoding can…
- Jul 7, 2026GCP-2026-046CVE-2026-53359
GCP-2026-046 — Published: 2026-07-06Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging…
- Jun 25, 2026GCP-2026-044HighCVE-2025-0982
GCP-2026-044 — Published: 2026-06-25Description Description Severity Notes A vulnerability was detected in Application Integration's JavaScript task,…
- Jun 24, 2026GCP-2026-042LowNo CVE ID
GCP-2026-042 — Published: 2026-06-24Description Description Severity Notes A privilege escalation vulnerability was addressed in Cloud Build.
- Jun 24, 2026GCP-2026-043HighCVE-2026-12715
GCP-2026-043 — Published: 2026-06-24Description Description Severity Notes A vulnerability was found in Firebase Studio where the GetSignedGcsUrl RPC…
- Jun 24, 2026GCP-2026-041HighCVE-2026-34480, CVE-2026-34477
GCP-2026-041 — Published: 2026-06-24Description Description Severity Notes A recent security investigation was conducted regarding log4j vulnerabilities…
- Jun 23, 2026GCP-2026-040CVE-2026-48706, CVE-2026-48743 +12
GCP-2026-040 — Published: 2026-06-23Description Description Severity Notes A series of vulnerabilities were discovered in Envoy Proxy. For instructions…
- Jun 22, 2026GCP-2026-038HighCVE-2026-8934
GCP-2026-038 — Published: 2026-06-22Description Description Severity Notes A vulnerability was found in App Engine where the GetDashboardAppStats GraphQL…
- Jun 22, 2026GCP-2026-039MediumNo CVE ID
GCP-2026-039 — Published: 2026-06-22Description Description Severity Notes A vulnerability in Cloud Logging could have allowed attackers to hijack log…
- Jun 19, 2026GCP-2026-037CriticalCVE-2026-50195, CVE-2026-53488 +3
GCP-2026-037 — Published: 2026-06-18Updated: 2026-06-20Description Description Severity Notes 2026-06-20 Update: Added GKE patch versions containing the…
- Jun 9, 2026GCP-2026-035HighCVE-2026-47774
GCP-2026-035 — Published: 2026-06-08Description Description Severity Notes A vulnerability was found in Envoy where HTTP/2 downstream request processing…
- Jun 9, 2026GCP-2026-036HighCVE-2025-10263
GCP-2026-036 — Published: 2026-06-09Description Description Severity Notes ARM has announced CVE-2025-10263, an architectural issue affecting some Arm…
- May 20, 2026GCP-2026-005HighNo CVE ID
GCP-2026-005 — Published: 2026-01-28Description Description Severity Notes This vulnerability affects Log Analytics interface and Cloud Monitoring…
- May 20, 2026GCP-2026-006HighCVE-2025-15467
GCP-2026-006 — Published: 2026-01-29Updated: 2026-02-20Description Description Severity Notes 2026-02-20 Update: Added patch versions for GKE. Multiple…
- May 20, 2026GCP-2026-007HighCVE-2025-40297
GCP-2026-007 — Published: 2026-02-09Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…
- May 20, 2026GCP-2026-008HighCVE-2025-27572, CVE-2025-30513 +4
GCP-2026-008 — Published: 2026-02-10Description Description Severity Notes A set of security vulnerabilities affect Intel® TDX firmware.
- May 20, 2026GCP-2026-009HighNo CVE ID
GCP-2026-009 — Published: 2026-02-13Description Description Severity Notes Observability Analytics user interface versions prior to January 2026 can be…
- May 20, 2026GCP-2026-010HighCVE-2025-13292
GCP-2026-010 — Published: 2026-02-13Description Description Severity Notes A vulnerability was identified in the Apigee platform that could have allowed a…
- May 20, 2026GCP-2026-011HighCVE-2026-2472
GCP-2026-011 — Published: 2026-02-20Description Description Severity Notes A stored Cross-site Scripting (XSS) vulnerability in…
- May 20, 2026GCP-2026-012HighCVE-2026-2473
GCP-2026-012 — Published: 2026-02-20Description Description Severity Notes In Google Cloud Vertex AI, a vulnerability involving predictable bucket naming…
- May 20, 2026GCP-2026-013CVE-2026-26311, CVE-2026-26309 +5
GCP-2026-013 — Published: 2026-03-11Description Description Severity Notes The following vulnerabilities were discovered in Envoy…
- May 20, 2026GCP-2026-014HighCVE-2025-38678
GCP-2026-014 — Published: 2026-03-14Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…
- May 20, 2026GCP-2026-015HighCVE-2026-23268
GCP-2026-015 — Published: 2026-03-27Description Description Severity Notes The following vulnerability was discovered in the Linux kernel that can lead to…
- May 20, 2026GCP-2026-016HighCVE-2025-38616
GCP-2026-016 — Published: 2026-03-27Updated: 2026-03-31Description Description Severity Notes 2026-03-31 Update: Added patch versions for Ubuntu nodes…
- May 20, 2026GCP-2026-017HighCVE-2026-23273
GCP-2026-017 — Published: 2026-04-02Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-018HighCVE-2026-23111
GCP-2026-018 — Published: 2026-04-07Updated: 2026-04-15Description Description Severity Notes 2026-04-15 Update: Added patch versions for Ubuntu nodes…
- May 20, 2026GCP-2026-019MediumCVE-2025-54510
GCP-2026-019 — Published: 2026-04-14Description Description Severity Notes Researchers discovered a vulnerability in AMD firmware that could allow a…
- May 20, 2026GCP-2026-020HighCVE-2026-23231
GCP-2026-020 — Published: 2026-04-14Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-021MediumCVE-2023-20585
GCP-2026-021 — Published: 2026-04-14Description Description Severity Notes AMD reported a vulnerability in its firmware that could have allowed a…
- May 20, 2026GCP-2026-022HighCVE-2026-23209
GCP-2026-022 — Published: 2026-04-16Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-023HighCVE-2026-23074
GCP-2026-023 — Published: 2026-04-28Updated: 2026-05-07Description Description Severity Notes 2026-05-07 Update: Added patch versions for Ubuntu node…
- May 20, 2026GCP-2026-024HighCVE-2025-38248
GCP-2026-024 — Published: 2026-04-28Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-025HighCVE-2026-23274
GCP-2026-025 — Published: 2026-04-30Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-026HighCVE-2026-31431
GCP-2026-026 — Published: 2026-04-30Updated: 2026-05-04Description Description Severity Notes 2026-05-04 Update: Added patch versions for GKE. A…
- May 20, 2026GCP-2026-027HighCVE-2026-23351
GCP-2026-027 — Published: 2026-05-01Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…
- May 20, 2026GCP-2026-028HighCVE-2026-31431
GCP-2026-028 — Published: 2026-05-05Updated: 2026-05-27Description Description Severity Notes CVE-2026-31431, also known as "Copy Fail," is a…
- May 20, 2026GCP-2026-029No CVE ID
GCP-2026-029 — Published: 2026-05-07Description Description Severity Notes Microsoft is updating the Secure Boot certificates originally issued in 2011 to…
- May 20, 2026GCP-2026-030HighCVE-2026-43500, CVE-2026-43284
GCP-2026-030 — Published: 2026-05-11Updated: 2026-06-24Description Description Severity Notes 2026-06-24 Update: Added patch versions for GKE. 2026-05-20…
- May 20, 2026GCP-2026-031MediumCVE-2025-61971, CVE-2025-61972 +1
GCP-2026-031 — Published: 2026-05-12Description Description Severity Notes Researchers discovered a vulnerability in AMD firmware that, due to missing…
- May 20, 2026GCP-2026-032HighCVE-2025-54518
GCP-2026-032 — Published: 2026-05-12Description Description Severity Notes AMD has identified a hardware-level vulnerability in Zen 2 microarchitecture…
- May 20, 2026GCP-2026-033MediumCVE-2026-46300
GCP-2026-033 — Published: 2026-05-14Updated: 2026-07-16Description Description Severity Notes 2026-07-16 Update: The following versions of GKE are updated…
- May 20, 2026GCP-2026-034HighCVE-2026-2264
GCP-2026-034 — Published: 2026-05-20Description Description Severity Notes A vulnerability was found in Apigee where the IntegrationRegion parameter in…