Skip to contentAws vulnerabilities
Newest
- aws sagemaker python sdkCleartext transmission of sensitive materials in aws/sagemaker-python-sdkCVE-2026-1777Fix available8.5 High
- amazon firecrackerArbitrary Host File Overwrite via Symlink in Firecracker JailerCVE-2026-13866.0 Medium
- amazon kiro ideCommand Injection in Kiro GitLab Merge Request HelperCVE-2026-08308.4 High
- aws aws-sdk-netAWS SDK for .NET V4 adopted defense in depth enhancement for region parameter valueCVE-2026-22611Fix available3.7 Low
- aws s3 encryption client for goAmazon S3 Encryption Client has a Key Commitment IssueCVE-2025-14764Fix available6.0 Medium
- aws s3 encryption client for javaAmazon S3 Encryption Client for Java has a Key Commitment IssueCVE-2025-14763Fix available6.0 Medium
- aws sdk for rubyAWS SDK for Ruby's S3 Encryption Client has a Key Commitment IssueCVE-2025-14762Fix available6.0 Medium
- aws sdk for phpAWS SDK for PHP's S3 Encryption Client has a Key Commitment IssueCVE-2025-14761Fix available6.0 Medium
- aws sdk for c++aws-sdk-cpp security updateCVE-2025-147606.0 Medium
- aws s3 encryption client for .netAmazon S3 Encryption Client for .NET has a Key Commitment IssueCVE-2025-14759Fix available6.0 Medium
- amazon harmonix, aws harmonix on aws +1 moreOverly Permissive Trust Policy in Harmonix on AWS EKSCVE-2025-145038.6 High
- aws wickr, wickr enterprise, wickr gov +2 moreImproper resource release in the call termination process in AWS Wickr before version 6.62.13 on...CVE-2025-135246.8 Medium
- aws go wrapper, jdbc wrapper, nodejs wrapper +2 more +4 moreAWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instanceCVE-2025-12967Fix available8.6 High
- aws research and engineering studio (res)An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another us…CVE-2025-128155.3 Medium
- amazon freertos-plus-tcpInvalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCPCVE-2025-116185.3 Medium
- amazon freertos-plus-tcpBuffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCPCVE-2025-116175.3 Medium
- amazon freertos-plus-tcp, aws freertos-plus tcp +1 moreBuffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCPCVE-2025-116165.3 Medium
- aws client vpnLocal Privilege Escalation Vulnerability in AWS Client VPN macOS ClientCVE-2025-114629.3 Critical
- aws client vpnLocal Privilege Escalation Vulnerability in AWS Client VPN Windows ClientCVE-2025-80697.3 High
- aws serverless application model command line interfacePath Traversal in AWS SAM CLI allows file copy to local cacheCVE-2025-3048Fix available6.9 Medium
- aws serverless application model command line interfacePath Traversal in AWS SAM CLI allows file copy to build containerCVE-2025-3047Public exploitFix available6.9 Medium
- amazon toughImproper timestamp caching during snapshot rollback in toughCVE-2025-2888Fix available5.7 Medium
- amazon toughFailure to detect delegated target rollback in toughCVE-2025-2887Fix available5.7 Medium
- amazon toughTerminating targets role delegations are not respected in toughCVE-2025-2886Fix available5.7 Medium
- amazon toughRoot metadata version not validated in toughCVE-2025-2885Fix available5.7 Medium
- amazon aws cloud development kit, aws cloud development kit command line interface +1 moreAWS CDK CLI prints AWS credentials retrieved by custom credential pluginsCVE-2025-2598Public exploitFix available5.7 Medium
- aws aws/sagemaker-python-sdkMD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdkCVE-2025-0508Fix available5.9 Medium
- aws temporary elevated access management (team) for aws iam identity centerRequest approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity CenterCVE-2025-19695.3 Medium
- aws deepjavalibraryPath traversal issue in Deep Java LibraryCVE-2025-0851Public exploitFix availableEPSS 26.4%9.3 Critical
- aws sign-in iam login flowIssue with AWS Sign-in IAM User Login Flow - Possible Username EnumerationCVE-2025-06936.9 Medium
- amazon aws cloud development kit, aws aws-cdk +1 moreIAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdkCVE-2025-23206Fix available1.8 Low
- amazon aws cloud development kit, aws aws-cdk +1 moreAWS CDK RestApi not generating authorizationScope correctly in resultant CFN templateCVE-2024-45037Fix available6.4 Medium
- amazon freertos-plus-tcpFreeRTOS-Plus-TCP Buffer Over-Read in DNS Response ParserCVE-2024-383739.6 Critical
- aws amazon-redshift-jdbc-driverAmazon JDBC Driver for Redshift SQL Injection via line comment generationCVE-2024-32888Fix available10.0 Critical
- aws sagemaker-python-sdkDeserialization of Untrusted Data in sagemaker-python-sdkCVE-2024-34072Fix available7.8 High
- aws sagemaker-python-sdkCommand Injection in sagemaker-python-sdkCVE-2024-34073Fix available7.8 High
- amazon aws amplify cli, aws amplify cli +1 moreAWS Amplify CLI has incorrect trust policy managementCVE-2024-28056Fix available9.8 Critical
- amazon aws software development kit, aws aws-sdk-php +1 morePotential URI resolution path traversal in the AWS SDK for PHPCVE-2023-51651Fix available6.0 Medium
- amazon aws cloud development kit, aws aws-cdk +1 moreAWS CDK EKS overly permissive trust policiesCVE-2023-35165Fix available6.6 Medium
- amazon efs-utils, elastic file system container storage interface driver +1 moreRace condition during concurrent TLS mounts in efs-utilsCVE-2022-46174Fix available4.2 Medium
- amazon cloudwatch agent, aws amazon-cloudwatch-agent +1 moreAmazon CloudWatch Agent for Windows has Privilege Escalation VectorCVE-2022-23511Fix available7.1 High
- amazon aws-sdk-javaPartial Path Traversal in com.amazonaws:aws-java-sdk-s3CVE-2022-31159Public exploitFix available7.9 High
- amazon awsui\/components-react, aws awsui-documentation +1 moreCross site scripting in @awsui/components-reactCVE-2022-24709Fix available8.8 High
- amazon toughImproper sanitization of delegated role names in toughCVE-2021-41150Fix available8.2 High
- amazon toughImproper sanitization of target names in toughCVE-2021-41149Fix available8.2 High
- amazon toughImproper verification of signature threshold in toughCVE-2020-15093Fix available8.6 High
- aws odbc driver, oracle database server +1 moreVulnerability in the Oracle ODBC Driver component of Oracle Database Server<span class=font-red>...CVE-2019-27997.5 High