BaseFortify

Publication date: 2026-04-23

Last updated on: 2026-04-24

Assigner: GoogleCloud

Description

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error during the refresh process. This vulnerability was patched on 29 January 2026, and no customer action is needed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-23

Last Modified

2026-04-24

Generated

2026-07-06

EPSS Evaluated

2026-07-05

NVD

CVE-2026-3259

EUVD

EUVD-2026-25203

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-3259. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70