Vulnerabilidades em amazon
55 resultadosAnálise Vexday
A Amazon tem 5 vulnerabilidades catalogadas na base Vexday, nenhuma delas sob ataque ativo ou com severidade crítica. A fraqueza dominante é CWE-863 (controle de acesso impróprio), indicando exposição potencial a escalação de privilégios; porém, a ausência de atualizações recentes sugere que o panorama atual é estável e sem pressão temporal imediata.
CVE-2024-52313MEDIUMdata.all authenticated users can obtain incorrect object level authorizationsEPSS 0.3%CVE-2024-10953MEDIUMdata.all authenticated users can perform mutating update operations on persisted notification recordsEPSS 0.3%CVE-2025-6031HIGHInsecure device pairing in end of life Amazon Cloud CamEPSS 0.3%CVE-2025-5279HIGHIssue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider pluginEPSS 0.3%CVE-2025-9039MEDIUMInformation Disclosure in Amazon ECS Container AgentEPSS 0.3%CVE-2026-94384MEDIUMMissing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce LambdaEPSS 0.3%CVE-2026-18657HIGHExecutable Resolution from Untrusted Project Directory in Kiro CLI on WindowsEPSS 0.2%CVE-2026-18656HIGHExecutable Resolution from Untrusted Project Directory in Kiro IDE on WindowsEPSS 0.2%CVE-2026-85654HIGHCode injection in the CDK generator in Amazon awslabs.dynamodb-mcp-serverEPSS 0.2%CVE-2025-8217MEDIUMInert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) ExtensionEPSS 0.2%CVE-2025-12779HIGHImproper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authEPSS 0.2%CVE-2023-32803HIGHThe ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certEPSS 0.2%CVE-2025-12829MEDIUMAn uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to IoEPSS 0.2%CVE-2026-7791HIGHImproper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows beforeEPSS 0.1%CVE-2026-95985HIGHKiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted WorkspacesEPSS —