Vulnerabilities in AWS
191 resultsCVE-2025-14763MEDIUMMissing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to intrEPSS 0.1%CVE-2025-14764MEDIUMMissing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introdEPSS 0.1%CVE-2025-14759MEDIUMMissing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to intrEPSS 0.1%CVE-2026-107332MEDIUMInsecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio CodeEPSS 0.1%CVE-2026-107783MEDIUMInsertion of sensitive information into log file in AWS Tools for PowerShellEPSS 0.1%CVE-2026-10584HIGHHTTPS Fallback to HTTP in Graph ExplorerEPSS 0.1%CVE-2026-115413HIGHAWS API MCP Server OAuth Token Audience Validation BypassEPSS 0.1%CVE-2026-6550MEDIUMKey commitment policy bypass via shared key cache in AWS Encryption SDK for PythonEPSS 0.1%CVE-2026-119924HIGHOut-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name ParserEPSS —CVE-2026-119923CRITICALHeap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin ParserEPSS —CVE-2026-122193CRITICALOS command injection in the example SSM documents in Trusted Remote Execution (REX)EPSS —