Approved changes feed: RSS · Atom

cpe:2.3:a:google_cloud:bigquery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGoogle Cloud (34bf7c79-23c3-583b-8203-6d0252c54ec0)
ProductBigquery (7f051588-4c61-5041-932a-f6731418ca40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14934 vulnerable 2026-07-29 00:26:17.653659 Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise
A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tenant repository takeover. This vulnerability was patched on 10 May 2026, and no customer action is needed.
Published: 2026-07-13T10:20:19.121Z
Updated: 2026-07-13T13:12:16.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3259 vulnerable 2026-06-08 08:01:18.274446 Sensitive Data Disclosure in BigQuery via Materialized View Error Messages
A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error during the refresh process. This vulnerability was patched on 29 January 2026, and no customer action is needed.
Published: 2026-04-23T08:35:04.149Z
Updated: 2026-04-30T15:21:26.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.