Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 450Last 24 hours2,725 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 11 | 8 | 1 | 0 | 23 | 24 |
| 2025 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-123859 | SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)Snowflake · Snowflake Connector for Python | High8.1 |
| CVE-2026-121925 | Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO DriverSnowflake · Snowflake PHP PDO Driver | Medium6.6 |
| CVE-2026-114456 | Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driversSnowflake · Snowflake Connector for Python | Medium6.5 |
| CVE-2026-92903 | Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL StringsSnowflake · Snowflake CLI | High8.2 |
| CVE-2026-86600 | Workload identity attestation generated before login host validation in Snowflake driversSnowflake · Snowflake Connector for Python | High8.2 |
| CVE-2026-86597 | Sensitive information written to logs by Snowflake driversSnowflake · Snowflake Connector for Python | Medium6.5 |
| CVE-2026-85528 | Snowflake JDBC Driver auto-configuration account validation permits credential redirectionSnowflake · Snowflake JDBC Driver | Medium5.3 |
| CVE-2026-85525 | Improper OCSP response validation in Snowflake driversSnowflake · Snowflake Connector for Python | High7.4 |
| CVE-2026-19594 | Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege EscalationSnowflake · Snowflake Python APIs | High8.1 |
| CVE-2026-16870 | Multiple Security Vulnerabilities in Snowflake libsnowflakeclientSnowflake · Snowflake libsnowflakeclient | High8.8 |
| CVE-2026-15925 | Improper TLS Hostname Verification in Snowflake Connector for PythonSnowflake · Snowflake Connector for Python | Critical9.2 |
| CVE-2026-15736 | Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemySnowflake · Snowflake SQLAlchemy | High8.3 |
| CVE-2026-15183 | Input Validation Vulnerabilities in Snowflake Spark ConnectorSnowflake · Snowflake Spark Connector | Critical9.2 |
| CVE-2026-15067 | Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account TakeoverSnowflake · Terraform Provider for Snowflake | High8.8 |
| CVE-2026-15062 | SQL Injection in Snowflake Snowpark Python SDKSnowflake · Snowpark Python SDK | Critical9.6 |
| CVE-2026-13752 | Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log CommandsSnowflake · Snowflake CLI | Medium6.0 |
| CVE-2026-13751 | Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!loadSnowflake · Snowflake CLI | Medium4.1 |
| CVE-2026-13750 | Snowflake CLI Sensitive Credential Exposure Through Debug LoggingSnowflake · Snowflake CLI | Medium5.5 |
| CVE-2026-13749 | Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template InjectionSnowflake · Snowflake CLI | High8.8 |
| CVE-2026-13748 | Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path RestrictionSnowflake · Snowflake CLI | Medium6.3 |
| CVE-2026-13746 | Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI ParametersSnowflake · Snowflake CLI | Low3.6 |
| CVE-2026-13744 | Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled InputSnowflake · Snowflake CLI | High8.3 |
| CVE-2026-6442 | Improper Command Detection Logic Allows RCE in Cortex Code Command-Line InterfaceSnowflake · Cortex Code CLI | High8.3 |
| CVE-2025-46614 | In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information…Snowflake · Snowflake ODBC | Low3.3 |