Skip to content
OpenAdvisories

Product · Google Cloud

Compute Engine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-85299

    Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration

    A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-project disk data. This v…

    Google Cloud Compute Engine