Google Cloud Platform

Name: Google Cloud Platform
Brand: Google

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical12high3medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2472US	—	0.61% (49th)	Exploit	no fix	2026-02-20	≤ Python SDK <1.131.0
CVE-2024-53270US	—	0.70% (53rd)	—	1.31.3-gke.1162000	2024-12-18	2 versions
CVE-2024-53269US	high7.5	0.68% (52nd)	—	1.31.3-gke.1162000	2024-12-18	2 versions
CVE-2026-47220US	—	0.66% (52nd)	—	no fix	2026-06-26	3 versions
CVE-2024-53271US	—	0.62% (49th)	—	1.31.3-gke.1162000	2024-12-18	2 versions
CVE-2026-48706US	high7.5	0.61% (49th)	—	no fix	2026-06-26	3 versions
CVE-2026-48090US	—	0.58% (47th)	—	no fix	2026-06-26	3 versions
CVE-2026-48042US	—	0.56% (46th)	—	no fix	2026-06-26	3 versions
CVE-2026-2473US	—	0.51% (43rd)	—	no fix	2026-02-20	≤ Vertex AI Experiments <1.133.0
CVE-2026-48044US	—	0.49% (42nd)	—	no fix	2026-06-26	3 versions
CVE-2025-62409US	high7.5	0.46% (39th)	—	no fix	2025-10-16	3 versions
CVE-2026-15810US	—	0.45% (39th)	—	no fix	2026-07-24	8 versions
CVE-2026-47204US	high7.5	0.45% (39th)	—	no fix	2026-06-26	3 versions
CVE-2026-47221US	high7.5	0.45% (39th)	—	no fix	2026-06-26	3 versions
CVE-2026-47207US	—	0.44% (38th)	—	no fix	2026-06-26	3 versions
CVE-2025-9571US	—	0.44% (38th)	—	no fix	2025-12-10	≤ Cloud Data Fusion <6.11.1
CVE-2025-62504US	high7.5	0.42% (36th)	—	no fix	2025-10-16	3 versions
CVE-2026-26310US	high7.5	0.41% (35th)	—	no fix	2026-03-10	3 versions
CVE-2026-48497US	high7.5	0.40% (35th)	—	no fix	2026-06-26	3 versions
CVE-2026-31837US	high7.5OT elevated	0.40% (34th)	—	no fix	2026-03-10	3 versions
CVE-2026-26309US	medium5.3	0.39% (33rd)	—	no fix	2026-03-10	3 versions
CVE-2026-47205US	—	0.39% (33rd)	—	no fix	2026-06-26	3 versions
CVE-2025-12414US	—	0.38% (31st)	—	no fix	2025-11-20	6 versions
CVE-2026-26311US	—	0.36% (29th)	—	no fix	2026-03-10	3 versions
CVE-2026-26330US	high7.5	0.33% (27th)	—	no fix	2026-03-10	3 versions
CVE-2025-12739US	—	0.33% (26th)	—	Looker 25.16.0	2025-11-24	5 versions
CVE-2025-13428US	high7.2	0.33% (26th)	—	6.3.64	2025-12-09	< 6.3.64
CVE-2026-26308US	high8.2OT elevated	0.30% (23rd)	—	no fix	2026-03-10	3 versions
CVE-2026-48743US	—	0.30% (22nd)	—	no fix	2026-06-26	3 versions
CVE-2025-54518US	—	0.29% (21st)	—	no fix	2026-05-15	≤ vers:unknown/*
CVE-2026-31838US	medium5.3OT elevated	0.23% (13th)	—	no fix	2026-03-10	3 versions
CVE-2026-47775US	—OT elevated	0.22% (12th)	—	no fix	2026-06-26	3 versions
CVE-2026-47692US	medium4.3	0.22% (12th)	—	no fix	2026-06-26	3 versions
CVE-2026-47778US	—	0.21% (11th)	—	no fix	2026-06-26	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free6 CVEs
CWE-476NULL Pointer Dereference5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-670Always-Incorrect Control Flow Implementation3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1124Excessively Deep Nesting1 CVEs
CWE-1189Improper Isolation of Shared Resources on System-on-a-Chip (SoC)1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan