Google Cloud Security Bulletins

GCP-2026-049 — Published: 2026-07-22Description Description Severity Notes A reflected Cross-Site Scripting (XSS) vulnerability was discovered in Google…

GCP-2026-047 — Published: 2026-07-13Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in…

GCP-2026-048 — Published: 2026-07-13Description Description Severity Notes A privilege escalation vulnerability was addressed in Developer Connect.

GCP-2026-045 — Published: 2026-06-29Description Description Severity Notes A vulnerability was detected in Envoy Proxy where blocked QPACK decoding can…

GCP-2026-046 — Published: 2026-07-06Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging…

GCP-2026-044 — Published: 2026-06-25Description Description Severity Notes A vulnerability was detected in Application Integration's JavaScript task,…

GCP-2026-042 — Published: 2026-06-24Description Description Severity Notes A privilege escalation vulnerability was addressed in Cloud Build.

GCP-2026-043 — Published: 2026-06-24Description Description Severity Notes A vulnerability was found in Firebase Studio where the GetSignedGcsUrl RPC…

GCP-2026-041 — Published: 2026-06-24Description Description Severity Notes A recent security investigation was conducted regarding log4j vulnerabilities…

GCP-2026-040 — Published: 2026-06-23Description Description Severity Notes A series of vulnerabilities were discovered in Envoy Proxy. For instructions…

GCP-2026-038 — Published: 2026-06-22Description Description Severity Notes A vulnerability was found in App Engine where the GetDashboardAppStats GraphQL…

GCP-2026-039 — Published: 2026-06-22Description Description Severity Notes A vulnerability in Cloud Logging could have allowed attackers to hijack log…

GCP-2026-037 — Published: 2026-06-18Updated: 2026-06-20Description Description Severity Notes 2026-06-20 Update: Added GKE patch versions containing the…

GCP-2026-035 — Published: 2026-06-08Description Description Severity Notes A vulnerability was found in Envoy where HTTP/2 downstream request processing…

GCP-2026-036 — Published: 2026-06-09Description Description Severity Notes ARM has announced CVE-2025-10263, an architectural issue affecting some Arm…

GCP-2026-005 — Published: 2026-01-28Description Description Severity Notes This vulnerability affects Log Analytics interface and Cloud Monitoring…

GCP-2026-006 — Published: 2026-01-29Updated: 2026-02-20Description Description Severity Notes 2026-02-20 Update: Added patch versions for GKE. Multiple…

GCP-2026-007 — Published: 2026-02-09Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…

GCP-2026-008 — Published: 2026-02-10Description Description Severity Notes A set of security vulnerabilities affect Intel® TDX firmware.

GCP-2026-009 — Published: 2026-02-13Description Description Severity Notes Observability Analytics user interface versions prior to January 2026 can be…

GCP-2026-010 — Published: 2026-02-13Description Description Severity Notes A vulnerability was identified in the Apigee platform that could have allowed a…

GCP-2026-011 — Published: 2026-02-20Description Description Severity Notes A stored Cross-site Scripting (XSS) vulnerability in…

GCP-2026-012 — Published: 2026-02-20Description Description Severity Notes In Google Cloud Vertex AI, a vulnerability involving predictable bucket naming…

GCP-2026-013 — Published: 2026-03-11Description Description Severity Notes The following vulnerabilities were discovered in Envoy…

GCP-2026-014 — Published: 2026-03-14Updated: 2026-03-25Description Description Severity Notes 2026-03-25 Update: Added patch versions for Ubuntu nodes…

GCP-2026-015 — Published: 2026-03-27Description Description Severity Notes The following vulnerability was discovered in the Linux kernel that can lead to…

GCP-2026-016 — Published: 2026-03-27Updated: 2026-03-31Description Description Severity Notes 2026-03-31 Update: Added patch versions for Ubuntu nodes…

GCP-2026-017 — Published: 2026-04-02Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-018 — Published: 2026-04-07Updated: 2026-04-15Description Description Severity Notes 2026-04-15 Update: Added patch versions for Ubuntu nodes…

GCP-2026-019 — Published: 2026-04-14Description Description Severity Notes Researchers discovered a vulnerability in AMD firmware that could allow a…

GCP-2026-020 — Published: 2026-04-14Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-021 — Published: 2026-04-14Description Description Severity Notes AMD reported a vulnerability in its firmware that could have allowed a…

GCP-2026-022 — Published: 2026-04-16Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-023 — Published: 2026-04-28Updated: 2026-05-07Description Description Severity Notes 2026-05-07 Update: Added patch versions for Ubuntu node…

GCP-2026-024 — Published: 2026-04-28Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-025 — Published: 2026-04-30Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-026 — Published: 2026-04-30Updated: 2026-05-04Description Description Severity Notes 2026-05-04 Update: Added patch versions for GKE. A…

GCP-2026-027 — Published: 2026-05-01Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can…

GCP-2026-028 — Published: 2026-05-05Updated: 2026-05-27Description Description Severity Notes CVE-2026-31431, also known as "Copy Fail," is a…

GCP-2026-029 — Published: 2026-05-07Description Description Severity Notes Microsoft is updating the Secure Boot certificates originally issued in 2011 to…

GCP-2026-030 — Published: 2026-05-11Updated: 2026-06-24Description Description Severity Notes 2026-06-24 Update: Added patch versions for GKE. 2026-05-20…

GCP-2026-031 — Published: 2026-05-12Description Description Severity Notes Researchers discovered a vulnerability in AMD firmware that, due to missing…

GCP-2026-032 — Published: 2026-05-12Description Description Severity Notes AMD has identified a hardware-level vulnerability in Zen 2 microarchitecture…

GCP-2026-033 — Published: 2026-05-14Updated: 2026-07-16Description Description Severity Notes 2026-07-16 Update: The following versions of GKE are updated…

GCP-2026-034 — Published: 2026-05-20Description Description Severity Notes A vulnerability was found in Apigee where the IntegrationRegion parameter in…