compute_engine vulnerabilities

CVEs whose affected-version data names the compute_engine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85299High· 8.3

today

Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration

A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-pro…

▾ TwilightGoogle Cloud · Compute EngineEPSS 0.35%via CVEORG