aws Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by aws
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Improper Memory Remap Handling in Firecracker by Amazon Web Services
CVE-2026-122192AwsFirecracker7.1HIGHUnsafe Reflection Vulnerability in Amazon Redshift JDBC Driver
CVE-2026-119084AwsAmazon-redshift-jdbc-d...9.2CRITICALImproper Access Control in Babelfish for PostgreSQL Extension Affects Multiple Versions
CVE-2026-119922AwsBabelfish-for-postgresql8.7HIGHTemplate Engine Vulnerability in Amazon Virtual Engineering Workbench
CVE-2026-119085AwsVirtual-engineering-wo...9.4CRITICALSensitive Information Exposure in Amazon Kinesis Producer Library for Java
CVE-2026-119117AwsAmazon-kinesis-producer8.2HIGHImpersonation Vulnerability in AWS Nitro Enclaves SDK
CVE-2026-119148AwsAws-nitro-enclaves-sdk-c8.2HIGHUse-After-Free and Double-Free Vulnerability in AWS Nitro Enclaves SDK
CVE-2026-119116AwsKmstool-enclave8.7HIGHAuthorization Flaw in AWS Private CA Connector for Kubernetes by Amazon Web Services
CVE-2026-119115AwsAws-privateca-issuer8.4HIGHMissing Token Audience Validation in AWS API MCP Server
CVE-2026-115413AwsAws-api-mcp-server7.3HIGHSQL Injection Vulnerability in AWS Cloud Development Kit Redshift Module
CVE-2026-115418AwsAws-cdk/aws-redshift-a...7HIGHRelative Path Traversal Vulnerability in Amazon Web Services Multi Model Server
CVE-2026-115812AwsMulti-model-server9.3CRITICALMemory Allocation Vulnerability in AWS MQTT 3.1.1 Adapter
CVE-2026-115417AwsAws-c-MQtt8.2HIGHInsufficient Isolation in Amazon Strands Agents SDK for Python and TypeScript
CVE-2026-115419AwsStrands-agents8.6HIGHOS Command Injection Vulnerability in AWS SAM CLI
CVE-2026-115414AwsAws-sam-cli8.4HIGHSource Verification Flaw in Amazon SageMaker Python SDK
CVE-2026-112408AwsAmazon Sagemaker Pytho...9.4CRITICALPrivilege Escalation in AWS CICD Toolchain for Serverless Applications
CVE-2026-112407AwsCicd-toolchain-for-ser...8.7HIGHDeserialization Flaw in Amazon Neptune Engine by Amazon
CVE-2026-110812AwsAmazon Neptune Engine9.4CRITICALImproper Authorization in AWS Amplify API Category by Amazon
CVE-2026-108096AwsAws-amplify/graphql-in...7.1HIGHCommand Injection Vulnerability in Amazon Agent Plugins for AWS Databases
CVE-2026-107322AwsDatabases-on-aws8.5HIGHCode Generation Vulnerability in Amazon Bedrock AgentCore Starter Toolkit
CVE-2026-105812AwsBedrock-agentcore-star...8.8HIGHAuthorization Bypass in Amazon QnABot on AWS by AWS
CVE-2026-105811AwsQnabot-on-aws7.1HIGHOS Command Injection Vulnerability in Amazon SageMaker by Amazon
CVE-2026-104019AwsSagemaker-distribution9.3CRITICALServer-Side Request Forgery in Loom for AWS by AWS Labs
CVE-2026-103958AwsLoom8.3HIGHServer-Side Request Forgery in Loom for AWS
CVE-2026-103957AwsLoom8.2HIGHAuthentication Flaw in Loom for AWS Affects AWS Services
CVE-2026-103956AwsLoom👾🟡10CRITICAL