Vulnerabilidades en Amazon Web Services
10 resultadosAnálisis Vexday
A AWS apresenta 10 vulnerabilidades catalogadas, com 2 divulgadas nos últimos 90 dias, mas nenhuma sob ataque ativo no momento. Não há críticas no perfil, e a fraqueza dominante (CWE-250: Execução com Privilégios Insuficientes) sugere risco moderado associado a controle de acesso. O panorama indica exposição contenida, sem sinais de exploração em massa.
CVE-2021-40831MEDIUMMissing SNI validation and inconsistent CA override function behavior within AWS IoT Device SDKs on Apple devicesEPSS 0.6%CVE-2021-40828MEDIUMTLS hostname validation issues within AWS IoT Device SDKs on WindowsEPSS 0.4%CVE-2022-0071HIGHHotdog Container EscapeEPSS 0.4%CVE-2021-3101HIGHHotdog Container EscapeEPSS 0.4%CVE-2021-40830MEDIUMInconsistent CA override function behavior within AWS IoT Device SDKs on Unix systemsEPSS 0.4%CVE-2021-40829MEDIUMTLS hostname validation issues within AWS IoT Device SDKs on macOSEPSS 0.4%CVE-2022-0070HIGHLog4j hot patch package privilege escalationEPSS 0.4%CVE-2021-3100HIGHLog4j hot patch package privilege escalationEPSS 0.4%CVE-2026-12958HIGHArbitrary file write in Language Servers for AWSEPSS 0.3%CVE-2026-12957HIGHArbitrary Code Execution in Language Servers for AWSEPSS 0.2%