Aws Res vulnerabilities

• amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 more Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser CVE-2026-119924 7.2 HighNovember 6, 2026
• amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 more Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser CVE-2026-119923 9.3 CriticalNovember 6, 2026
• amazon aurora postgresql with babelfish, aws babelfish-for-postgresql +1 more Babelfish for PostgreSQL Privilege Escalation CVE-2026-119922 8.7 HighNovember 3, 2026
• aws labs postgres mcp server Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server CVE-2026-87911 9.0 CriticalSeptember 9, 2026
• aws res RES Auth.GetUserPrivateKey Arbitrary File Read CVE-2026-14904 7.1 HighJuly 7, 2026
• amazon research and engineering studio, aws research and engineering studio (res) +1 more AWS Research and Engineering Studio (RES) FileBrowser Command Injection CVE-2026-5709 7.7 HighApril 6, 2026
• amazon research and engineering studio, aws research and engineering studio (res) +1 more Improper Control of User-Modifiable Attributes in RES CreateSession API CVE-2026-5708 8.7 HighApril 6, 2026
• amazon research and engineering studio, aws research and engineering studio (res) +1 more Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES) CVE-2026-5707 8.7 HighApril 6, 2026
• aws research and engineering studio (res) An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another us… CVE-2025-12815 5.3 MediumNovember 6, 2025