Google Cloud Platform

Security incident: Researchers discovered and chained three previously unknown vulnerabilities in Google Chrome, which have since been patched.

Researchers identified and chained three previously unknown vulnerabilities in Google Chrome. These vulnerabilities have since been patched by Google.

Security incident: Google Chrome and Mozilla Firefox have released updates to address a total of 114 security vulnerabilities.

Google Chrome and Mozilla Firefox released updates to patch 114 security vulnerabilities across their respective browsers.

RESOLVED: Multiple products in us-central1-b are experiencing network service degradation.

Google Cloud published an incident report for a network service degradation in us-central1-b and us-central1-f on September 1, 2026. The outage impacted Compute Engine, GKE, Cloud Run, App Engine, and various other regional services due to network isolation.

[Updated] GCP-2026-062

Google Cloud published security advisory GCP-2026-062 regarding multiple high-severity vulnerabilities in Slurm affecting Cluster Toolkit blueprints. Users are advised to review the Cluster Toolkit security bulletin for mitigation steps.

[Updated] GCP-2026-063

Google patched a critical 'Improper Privilege Management' vulnerability (CVE-2026-15587) in Google Security Operations SOAR. The issue allowed authenticated attackers to escalate to system-level access; all customers have been automatically upgraded to version 6.3.85.

GCP-2026-064

Google Cloud published security advisory GCP-2026-064 regarding CVE-2026-19759, an incorrect authorization vulnerability in Application Integration. The issue allowed authenticated users to execute arbitrary internal RPCs and was patched on June 17, 2026.

GCP-2026-065

Google Cloud published security advisory GCP-2026-065 regarding a critical deserialization vulnerability (CVE-2026-81867) in Application Integration. The issue allowed arbitrary code execution and was patched on June 28, 2026; no customer action is required.

GCP-2026-066

Google Cloud published security advisory GCP-2026-066 regarding a 'Confused Deputy' vulnerability (CVE-2026-81375) in Application Integration. The flaw allowed authenticated attackers to access internal files, but was patched on June 30, 2026; no customer action is required.

[Updated] GCP-2026-059

Google Cloud published security advisory GCP-2026-059 regarding CVE-2026-4644. A high-severity missing authorization vulnerability in Integration Connectors allowed attackers to escalate privileges and take over projects; the issue was patched on December 11, 2025.

[Updated] GCP-2026-060

Updated GCP-2026-060 to include a link to the Cluster Toolkit security bulletin regarding the Slurm sbcast tool vulnerability (CVE-2026-65107).