VYPR

Snowflake ODBC Driver

by Snowflake

CVEs (2)

  • CVE-2025-46614LowApr 28, 2025
    risk 0.21cvss 3.3epss 0.00

    In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File.

  • CVE-2026-16870Jul 24, 2026
    risk 0.00cvss epss 0.00

    Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host. An attacker could…