目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Snowflake 厂商漏洞列表 / CVE 中文分析 16

Snowflake 厂商相关 16 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

本页为 Snowflake 厂商的漏洞聚合目录，专门归集该企业在数据分析与云数仓领域的各类安全缺陷。内容涵盖远程代码执行、权限提升及配置错误等常见风险类型，时间跨度自早期版本发布至今。通过本页面，安全研究人员可快速追踪 Snowflake 官方发布的安全公告，深入理解特定架构下的弱点成因，或按产品名称检索其完整的历史漏洞记录，从而有效评估系统暴露面并制定针对性的修复策略。

上位製品 Snowflake: Snowflake CLI Snowflake ODBC Cortex Code CLI Snowpark Python SDK Terraform Provider for Snowflake Snowflake Spark Connector Snowflake SQLAlchemy Snowflake Connector for Python Snowflake libsnowflakeclient Snowflake Python APIs
CVE IDタイトルCVSS深刻度公開日
CVE-2026-19594 Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation — Snowflake Python APIsCWE-22 8.1 High2026-08-12
CVE-2026-16870 Multiple Security Vulnerabilities in Snowflake libsnowflakeclient — Snowflake libsnowflakeclientCWE-121 8.8 High2026-07-24
CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python — Snowflake Connector for PythonCWE-297--2026-07-16
CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy — Snowflake SQLAlchemyCWE-89 8.3 High2026-07-14
CVE-2026-15183 Input Validation Vulnerabilities in Snowflake Spark Connector — Snowflake Spark ConnectorCWE-89--2026-07-14
CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover — Terraform Provider for SnowflakeCWE-89 8.8 High2026-07-08
CVE-2026-15062 SQL Injection in Snowflake Snowpark Python SDK — Snowpark Python SDKCWE-89 9.6 Critical2026-07-08
CVE-2026-13752 Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands — Snowflake CLICWE-89 6.0 Medium2026-06-29
CVE-2026-13751 Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load — Snowflake CLICWE-918 4.1 Medium2026-06-29
CVE-2026-13750 Snowflake CLI Sensitive Credential Exposure Through Debug Logging — Snowflake CLICWE-532 5.5 Medium2026-06-29
CVE-2026-13749 Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection — Snowflake CLICWE-94 8.8 High2026-06-29
CVE-2026-13748 Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction — Snowflake CLICWE-22 6.3 Medium2026-06-29
CVE-2026-13746 Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters — Snowflake CLICWE-89 3.6 Low2026-06-29
CVE-2026-13744 Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input — Snowflake CLICWE-89 8.3 High2026-06-29
CVE-2026-6442 Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface — Cortex Code CLICWE-1286 8.3 High2026-04-16
CVE-2025-46614 Snowflake ODBC Driver 安全漏洞 — Snowflake ODBCCWE-532 3.3 Low2025-04-28

本页汇总了 Snowflake 厂商截至目前公开的全部 16 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。