CVE-2026-3259

N/A

Description

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error during the refresh process. This vulnerability was patched on 29 January 2026, and no customer action is needed.

CVE Details

CVSS v3.1 ScoreN/A

Published4/23/2026

Last Modified4/24/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-209

References

https://docs.cloud.google.com/bigquery/docs/release-notes/#April_15_2026(f45cbf4e-4146-4068-b7e1-655ffc2c548c)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.