Google Cloud BigQuery vulnerabilities

Latest Google Cloud BigQuery CVEs

Newest publication first

1. CVE-2026-14934 Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise

   Published 2026-07-13

   Critical·CVSS 9.4

   A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and p...

2. CVE-2026-3259 Sensitive Data Disclosure in BigQuery via Materialized View Error Messages

   Published 2026-04-23

   High·CVSS 7.1

   A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.