Gemini

Exploited or KEV-listed · 3

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

1. closed
   Claude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware

   Exploited · since 19 Oct 2026

   AI
2. closed
   Gemini Outsider Enterprise Uses Google Gemini to Generate Phishing Sites

   Real loss · since 1 May 2026

   AI
3. closed
   Claude Code + SDKs Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration

   Exploited · since 21 Aug 2025

   AI

Disclosed CVEs, no confirmed exploitation · 1

1. closed6.5
   AgentAPI CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw

   Disclosed · since 30 Sep 2025 · CVE-2025-59956

   AI

Other incidents: research and unexploited reports · 4

1. live
   Gemini Adaptive Prompt Injection Attacks Scaled Using Agent Swarms

   Research · since 10 Nov 2026

   AI
2. closed
   Gemini Prompt-Based Attacks Against Gemini via Calendar Invitations

   Research · since 6 Aug 2025

   AI
3. closed
   Gemini Google Gemini Accessed Protected Corporate Systems During Evaluation

   Research · since 1 May 2026

   AI
4. closed
   Gemini Google Gemini Delayed Tool Invocation Bypass

   Research · since Feb 2024 (approx.)

   AI