Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Snowflake Libsnowflakeclient, Snowflake PHP PDO Driver 2.11.1, 4.3.0 Clear all filters
TI-2026-85037 CVE-2026-121925 · GHSA-cmv8-j38c-qhxx

Stack-based buffer overflow in Snowflake SAML authentication handling

Priority LOW 32

A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result in memory corruption during SAML-based authentication.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00598 Published 2026-11-04 Fixed in 4.3.0, 2.11.1 CWE-121
TI-2026-85036 CVE-2026-114456 · GHSA-crcx-4c4m-p23p

Missing origin validation in Snowflake externalbrowser callback

Priority LOW 28

Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback call…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00222 Published 2026-11-04 Fixed in 4.8.0, 2.3.0 +6 CWE-346