Snowflake

Snowflake operates a cloud data platform and an ecosystem of connectors and client libraries that integrate with a wide range of languages and frameworks, presenting a supply-chain dependency footprint despite a narrow product roster. The vendor's vulnerability exposures cluster around its connector and SDK products—including JDBC connectors, Streamlit integrations, and C/C++ client libraries—and recur through weakness classes spanning command injection, default permission misconfigurations, sensitive information leakage into logs, race conditions, and path-traversal flaws that reflect both integration complexity and deployment-configuration sensitivity. These weakness classes are characteristic of widely embedded client software and suggest that remediation often extends to the applications and platforms that consume the connector libraries rather than being isolated to Snowflake alone. Defenders should treat connector and SDK advisories from this vendor as supply-chain signals and audit dependent applications for misconfiguration and privilege escalation through default or inherited settings. Live severity, exploitation, and exposure counts are shown alongside this summary.