Vulnerabilities in AWS
191 resultsCVE-2026-89090HIGHDenial of service in the event stream header decoder in AWS SDK for Go v2EPSS 0.3%CVE-2026-11401HIGHPrivilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQLEPSS 0.3%CVE-2026-108096HIGHImproper authorization in query resolvers for SQL-backed models in AWS Amplify API CategoryEPSS 0.3%CVE-2026-10740MEDIUMExcessive memory allocation in s2n-quicEPSS 0.3%CVE-2026-105812HIGHCode injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent importEPSS 0.3%CVE-2026-6966HIGHSignature Threshold Bypass in awslabs/tough Delegated RolesEPSS 0.3%CVE-2026-115416MEDIUMIncorrect authorization checks in Amazon Athena engine version 3 query processingEPSS 0.3%CVE-2026-5747HIGHOut-of-bounds Write in Firecracker virtio-pci TransportEPSS 0.3%CVE-2025-0508MEDIUMMD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdkEPSS 0.3%CVE-2026-121652MEDIUMStored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup renderingEPSS 0.3%CVE-2025-13524MEDIUMImproper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call pEPSS 0.3%CVE-2026-1778HIGHTLS disabled by default in select aws/sagemaker-python-sdk configurationsEPSS 0.3%CVE-2026-122266MEDIUMImproper isolation of shared resources in aws-network-policy-agent in Amazon EKSEPSS 0.3%CVE-2026-4269MEDIUMImproper S3 ownership verification in Bedrock AgentCore Starter ToolkitEPSS 0.3%CVE-2026-4428CRITICALCRL Distribution Point Scope Check Logic Error in AWS-LCEPSS 0.3%CVE-2026-6911CRITICALAuthentication Bypass via Missing JWT Signature Verification in AWS Ops WheelEPSS 0.3%CVE-2026-6967HIGHMissing Delegated Metadata Validation in awslabs/toughEPSS 0.3%CVE-2026-120497MEDIUMStored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsEPSS 0.2%CVE-2026-16317HIGHSilent Drop of TLS 1.3 Encrypted Records in s2n-tlsEPSS 0.2%CVE-2026-7426MEDIUMOut-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCPEPSS 0.2%