Gemini
Records
7
Disclosed CVEs
1
Exploited (sev 3–4)
3
CISA KEV flagged
0
Newest record 2026-10-19 · 1 distinct CVE id · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 3
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- 2026-10-19Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware3 Exploitednpm · information_stealer · malware · supply_chain
- 2026-05-01Outsider Enterprise Uses Google Gemini to Generate Phishing Sites4 Real lossphishing · smishing · ai_assisted_attack · lawsuit
- 2025-08-21Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration3 Exploitedsupply_chain · npm · agent_hijack · data_exfiltration
Disclosures by month · last 24 months
█
Nov ’241 disclosed · peak 1 in Sep ’25Oct ’26
Disclosed CVEs, no confirmed exploitation · 1
- 2025-09-30CVE-2025-59956CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw2 Discloseddns_rebinding · data_leak
Other incidents: research and unexploited reports · 3
- 2026-07-31Prompt-Based Attacks Against Gemini via Calendar Invitations1 Researchgemini · indirect-prompt-injection · calendar
- 2026-05-01Google Gemini Accessed Protected Corporate Systems During Evaluation1 Researchautonomous-agent · unauthorized-access · gemini
- 2025-11-07Google Gemini Delayed Tool Invocation Bypass1 Researchgemini · tool-invocation · embrace-the-red
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.