Approved changes feed: RSS · Atom

cpe:2.3:a:google_cloud:identity_platform_and_firebase_authentication:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGoogle Cloud (34bf7c79-23c3-583b-8203-6d0252c54ec0)
ProductIdentity Platform And Firebase Authentication (89ad5b5c-cebe-5fd8-95a6-82040b74e933)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-85268 vulnerable 2026-11-03 10:16:23.541284 Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID
A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.
Published: 2026-10-30T10:20:06.249Z
Updated: 2026-10-30T16:48:22.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.