Vulnerabilidades en Snowflake
24 resultadosCVE-2026-16870HIGHMultiple Security Vulnerabilities in Snowflake libsnowflakeclientEPSS 1.3%CVE-2026-121925MEDIUMBuffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO DriverEPSS 0.6%CVE-2026-13749HIGHSnowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template InjectionEPSS 0.5%CVE-2026-15067HIGHMultiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account TakeoverEPSS 0.5%CVE-2026-86600HIGHWorkload identity attestation generated before login host validation in Snowflake driversEPSS 0.5%CVE-2026-19594HIGHPath Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege EscalationEPSS 0.5%CVE-2026-13744HIGHSnowflake CLI SQL Injection Through Improper Neutralization of User-Controlled InputEPSS 0.5%CVE-2026-6442HIGHImproper Command Detection Logic Allows RCE in Cortex Code Command-Line InterfaceEPSS 0.4%CVE-2026-15062CRITICALSQL Injection in Snowflake Snowpark Python SDKEPSS 0.4%CVE-2026-15736HIGHMultiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemyEPSS 0.4%CVE-2026-123859HIGHSQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)EPSS 0.4%CVE-2026-13752MEDIUMSnowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log CommandsEPSS 0.3%CVE-2026-15183CRITICALInput Validation Vulnerabilities in Snowflake Spark ConnectorEPSS 0.3%CVE-2026-85528MEDIUMSnowflake JDBC Driver auto-configuration account validation permits credential redirectionEPSS 0.3%CVE-2026-114456MEDIUMMissing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driversEPSS 0.2%CVE-2026-13746LOWSnowflake CLI SQL Injection Through Improper Neutralization of Local CLI ParametersEPSS 0.2%CVE-2026-13751MEDIUMSnowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!loadEPSS 0.2%CVE-2026-92903HIGHImproper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL StringsEPSS 0.2%CVE-2026-13748MEDIUMSnowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path RestrictionEPSS 0.2%CVE-2026-15925CRITICALImproper TLS Hostname Verification in Snowflake Connector for PythonEPSS 0.2%