Login Request a demo
LO
Product
Looker
by Google Cloud · last CVE Jul 24, 2026
9
CVEs
0
On KEV
9.2
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 7Medium 1Low 0
Severity
All severities9Critical1High7Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Looker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15810
8.7
0%
Jul 24
Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover
Affected: before 25.6.103; before 25.12.65; before 25.18.68; before 26.0.66; before 26.2.47; before 26.4.36; +10 more
CVE-2025-12741
7.7
0%
Nov 24
Arbitrary File Write in Denodo dialect of Looker allows Remote Code Execution
Affected: before 24.12.108; before 24.18.200; before 25.0.78; before 25.6.65; before 25.8.47; before 25.12.10; +8 more
CVE-2025-12740
7.7
0%
Nov 24
Remote Command Execution in Looker via IBM DB2 JDBC drive
Affected: before 25.0.93; before 25.6.84; before 25.12.42; before 25.14.50; before 25.16.44; before 25.0.93; +4 more
CVE-2025-12742
7.5
0%
Nov 25
Remote Code Execution in Looker via Teradata JDBC Driver
Affected: before 24.12.108; before 24.18.200; before 25.0.78; before 25.6.65; before 25.8.47; before 25.12.10; +8 more
CVE-2025-12739
7.3
0%
Nov 24
Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
Affected: before 24.18.201; before 25.0.79; before 25.6.66; before 25.12.7; before 25.16.0; before 25.18.0; +8 more
CVE-2025-12472
7.1
0%
Nov 19
Remote Code Execution in Looker due to Improperly Validated Directory Deletion
Affected: before 24.12.103; before 24.18.195; before 25.0.72; before 25.6.60; before 25.8.42; before 25.10.22; +6 more
CVE-2025-12155
7.1
1%
Nov 10
Command Injection in Looker
Affected: before 24.12.100; before 24.18.192; before 25.0.69; before 25.6.57; before 25.8.39; before 25.10.22; +6 more
Showing 7