Amazon
Vulnerability activity for Amazon: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 9
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 12
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumOct 28, 2026Amazon strands-agents-toolsCVE-2026-115415Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's secret
- 9.9CriticalOct 20, 2026Amazon Kiro Crew Auth bypass / access controlCVE-2026-112380Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To remediate this issue, users should upgrade to version 0.7.2.
- 5.3MediumOct 14, 2026Amazon.Extensions.S3.EncryptionCVE-2026-110310A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS#1 v1.5 padding oracle to recover the RSA-wrapped envelope key and decrypt the object. To remediate this issue, we recommend that users upgrade to version 3.2.2 or 4.0.3. The 1.x and 2.x lines will not be patched,
- 7.5HighOct 1, 2026Amazon ion-python Denial of serviceCVE-2026-104020Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version 0.15.0 or later.
- 8.8HighSep 24, 2026Amazon Kiro IDECVE-2026-95985The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to auto-loaded global configuration paths. We recommend you upgrade to Kiro IDE version 1.0.242 or later. Users who ran the agent in an untrusted workspace on an earlier version should also review the global
- 8.1HighSep 22, 2026amazon-connect-salesforce-lambda Auth bypass / access controlCVE-2026-94384Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda function that dispatches caller-supplied parameters to privileged service APIs without authorization validation. To remediate this issue, we recommend upgrading to version 5.26 or later. After setup is
- 9.1CriticalSep 10, 2026Amazon Deep Java Library Memory corruptionCVE-2026-85228An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To remediate this issue, users should upgrade to version 0.37.0 or above.
- 6.5MediumSep 4, 2026Amazon postgres-mcp-serverCVE-2026-85787An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user inte
- 6.8MediumAug 3, 2026Amazon aws command line interfaceCVE-2026-18654Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later.
- 7.5HighJul 1, 2026Amazon advanced jdbc wrapper DeserializationCVE-2026-14265Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a crafted serialized Java object. The RemoteQueryCachePlugin uses ObjectInputStream without class filtering when deserializing cached query results from Redis or Valkey, enabling gadget chain execution when ca
- 5.5MediumJul 1, 2026Amazon aws command line interface Privilege escalationCVE-2026-13769Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the default on most systems) may allow other local users on the same host to read credentials written by certain CLI subcommands (aws codeartifact login, aws iam create-virtual-mfa-device, aws deploy register). To remediate this issue, users should upgrade to AWS CLI 1.44.78 (v1) or 2.34.29 (v2) or later.
- 8.1HighMay 8, 2026Amazon Redshift JDBC DriverCVE-2026-8178An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentially execute code in the application context, provided a suitable class is available on the application's classpath. To mitigate this issue, users should upgrade to version 2.2.2 or later.
- 7.5HighOct 9, 2025Amazon.IonDotnet Denial of serviceCVE-2025-11573An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not receive further updates.
Top products
- aws command line interface2 CVEs in the last year
- strands-agents-tools1 CVE in the last year
- postgres-mcp-server1 CVE in the last year
- Kiro IDE1 CVE in the last year
- Kiro Crew1 CVE in the last year, 1 critical
- ion-python1 CVE in the last year
- Deep Java Library1 CVE in the last year, 1 critical
- Amazon.Extensions.S3.Encryption1 CVE in the last year
- amazon-connect-salesforce-lambda1 CVE in the last year
- Amazon Redshift JDBC Driver1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- AWS · Oct 28, 2026CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsCVE-2026-115415
- AWS · Oct 23, 2026CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scopeCVE-2026-85787
- AWS · Oct 20, 2026CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewCVE-2026-112380
- AWS · Oct 14, 2026CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NETCVE-2026-110310
- AWS · Oct 1, 2026CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion PythonCVE-2026-104020
- AWS · Sep 24, 2026CVE-2026-95985 - Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted WorkspacesCVE-2026-95985
- AWS · Sep 22, 2026CVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSServiceCVE-2026-94384
- AWS · Sep 10, 2026CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java LibraryCVE-2026-85228
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.