Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: aws Clear
ID Title
CVE-2026-81849 Vulnerability in Amazon aws (CVE-2026-81849)
vulnerability in Amazon aws (CVE-2026-81849). Successful exploitation can lead to full system takeover.
CVE-2026-81838 Vulnerability in Amazon path-traversal (CVE-2026-81838)
vulnerability in Amazon path-traversal (CVE-2026-81838). Data can be tampered with by attackers.
CVE-2026-78379 Vulnerability in Amazon aws (CVE-2026-78379)
vulnerability in Amazon aws (CVE-2026-78379). Successful exploitation can lead to full system takeover.
CVE-2026-77811 Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-77811)
cross-site scripting in Amazon aws (CVE-2026-77811). Confidential information can be exposed externally.
CVE-2026-77810 Vulnerability in Amazon aws (CVE-2026-77810)
vulnerability in Amazon aws (CVE-2026-77810). Successful exploitation can lead to full system takeover.
CVE-2026-77234 Authorization Flaw in Amazon aws (CVE-2026-77234)
vulnerability in Amazon aws (CVE-2026-77234). Successful exploitation can lead to full system takeover.
CVE-2026-75910 Vulnerability in Amazon aws (CVE-2026-75910)
vulnerability in Amazon aws (CVE-2026-75910). Confidential information can be exposed externally.
CVE-2026-75935 Vulnerability in Amazon aws (CVE-2026-75935)
vulnerability in Amazon aws (CVE-2026-75935). Risk of unauthorized operations or information disclosure.
CVE-2026-75897 Vulnerability in Amazon dos (CVE-2026-75897)
vulnerability in Amazon dos (CVE-2026-75897). Risk of unauthorized operations or information disclosure.
CVE-2026-18428 Vulnerability in Amazon aws (CVE-2026-18428)
vulnerability in Amazon aws (CVE-2026-18428). Successful exploitation can lead to full system takeover.
CVE-2026-19642 Out-of-Bounds Write in Amazon aws (CVE-2026-19642)
out-of-bounds write in Amazon aws (CVE-2026-19642). Risk of unauthorized operations or information disclosure.
CVE-2026-19311 Vulnerability in Amazon aws (CVE-2026-19311)
vulnerability in Amazon aws (CVE-2026-19311). Confidential information can be exposed externally.
CVE-2026-18952 SSRF (Server-Side Request Forgery) in Amazon aws (CVE-2026-18952)
SSRF in Amazon aws (CVE-2026-18952). Confidential information can be exposed externally.
CVE-2026-19111 Vulnerability in Amazon aws (CVE-2026-19111)
vulnerability in Amazon aws (CVE-2026-19111). Confidential information can be exposed externally.
CVE-2026-18954 Authorization Flaw in Amazon aws (CVE-2026-18954)
vulnerability in Amazon aws (CVE-2026-18954). Data can be tampered with by attackers.
CVE-2026-18953 Path Traversal in Amazon aws (CVE-2026-18953)
path traversal in Amazon aws (CVE-2026-18953). Successful exploitation can lead to full system takeover.
CVE-2026-18656 Vulnerability in Amazon aws (CVE-2026-18656)
vulnerability in Amazon aws (CVE-2026-18656). Successful exploitation can lead to full system takeover.
CVE-2026-18830 Vulnerability in Amazon aws (CVE-2026-18830)
vulnerability in Amazon aws (CVE-2026-18830). Confidential information can be exposed externally.
CVE-2026-18733 Vulnerability in Amazon aws (CVE-2026-18733)
vulnerability in Amazon aws (CVE-2026-18733). Successful exploitation can lead to full system takeover.
CVE-2026-18654 Vulnerability in Amazon awscli (CVE-2026-18654)
vulnerability in Amazon awscli (CVE-2026-18654). Confidential information can be exposed externally. Mitigation: upgrade to `1.45.28` or later.
CVE-2026-18655 Vulnerability in Amazon aws (CVE-2026-18655)
vulnerability in Amazon aws (CVE-2026-18655). Confidential information can be exposed externally.
CVE-2026-18394 Authorization Flaw in Amazon aws (CVE-2026-18394)
vulnerability in Amazon aws (CVE-2026-18394). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-18420 Vulnerability in Amazon aws (CVE-2026-18420)
vulnerability in Amazon aws (CVE-2026-18420). Successful exploitation can lead to full system takeover.
CVE-2026-18481 Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-18481)
cross-site scripting in Amazon aws (CVE-2026-18481). Confidential information can be exposed externally.
CVE-2026-18140 Vulnerability in Amazon dos (CVE-2026-18140)
vulnerability in Amazon dos (CVE-2026-18140). Risk of unauthorized operations or information disclosure.
CVE-2026-16796 Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
CVE-2026-16756 Vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756)
vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.66.5` or later.
CVE-2026-16584 Vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584)
vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.47` or later.
CVE-2026-16317 Vulnerability in Amazon aws (CVE-2026-16317)
vulnerability in Amazon aws (CVE-2026-16317). Data can be tampered with by attackers.
CVE-2026-15957 Vulnerability in Amazon aws (CVE-2026-15957)
vulnerability in Amazon aws (CVE-2026-15957). Risk of unauthorized operations or information disclosure.
CVE-2026-15415 Vulnerability in Amazon aws (CVE-2026-15415)
vulnerability in Amazon aws (CVE-2026-15415). Data can be tampered with by attackers.
CVE-2026-12283 SQL Injection in Amazon aws (CVE-2026-12283)
SQL injection in Amazon aws (CVE-2026-12283). Confidential information can be exposed externally.
CVE-2026-15737 Vulnerability in Amazon aws (CVE-2026-15737)
vulnerability in Amazon aws (CVE-2026-15737). Confidential information can be exposed externally.
CVE-2026-15895 OS Command Injection in Amazon jsii-diff (CVE-2026-15895)
OS command injection in Amazon jsii-diff (CVE-2026-15895). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.131.0` or later.
CVE-2026-15746 SSRF (Server-Side Request Forgery) in Amazon aws (CVE-2026-15746)
SSRF in Amazon aws (CVE-2026-15746). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-15738 Vulnerability in Amazon aws (CVE-2026-15738)
vulnerability in Amazon aws (CVE-2026-15738). Successful exploitation can lead to full system takeover.
CVE-2026-15643 SSRF (Server-Side Request Forgery) in Amazon aws (CVE-2026-15643)
SSRF in Amazon aws (CVE-2026-15643). Confidential information can be exposed externally.
CVE-2026-14904 Vulnerability in Amazon aws (CVE-2026-14904)
vulnerability in Amazon aws (CVE-2026-14904). Confidential information can be exposed externally.
CVE-2026-14471 SQL Injection in Amazon aws (CVE-2026-14471)
SQL injection in Amazon aws (CVE-2026-14471). Confidential information can be exposed externally.
CVE-2026-14265 Unsafe Deserialization in Amazon aws (CVE-2026-14265)
vulnerability in Amazon aws (CVE-2026-14265). Successful exploitation can lead to full system takeover.
CVE-2026-13760 OS Command Injection in Amazon aws-cdk-lib (CVE-2026-13760)
OS command injection in Amazon aws-cdk-lib (CVE-2026-13760). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.260.0` or later.
CVE-2026-13769 Vulnerability in Amazon awscli (CVE-2026-13769)
vulnerability in Amazon awscli (CVE-2026-13769). Confidential information can be exposed externally. Mitigation: upgrade to `1.44.78` or later.
CVE-2026-13762 Vulnerability in Amazon aws (CVE-2026-13762)
vulnerability in Amazon aws (CVE-2026-13762). Successful exploitation can lead to full system takeover.
CVE-2026-12957 Vulnerability in Amazon aws (CVE-2026-12957)
vulnerability in Amazon aws (CVE-2026-12957). Successful exploitation can lead to full system takeover.
CVE-2026-50195 Vulnerability in Amazon github.com/containerd/containerd/v2 (CVE-2026-50195)
vulnerability in Amazon github.com/containerd/containerd/v2 (CVE-2026-50195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.9, 2.2.5, 2.3.2` or later.
CVE-2026-12530 Vulnerability in Amazon bedrock-agentcore (CVE-2026-12530)
vulnerability in Amazon bedrock-agentcore (CVE-2026-12530). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.1` or later.
CVE-2026-11931 Vulnerability in Amazon aws (CVE-2026-11931)
vulnerability in Amazon aws (CVE-2026-11931). Confidential information can be exposed externally.
CVE-2026-12043 Vulnerability in Amazon aws (CVE-2026-12043)
vulnerability in Amazon aws (CVE-2026-12043). Successful exploitation can lead to full system takeover.
CVE-2026-10740 Vulnerability in Amazon s2n-quic (CVE-2026-10740)
vulnerability in Amazon s2n-quic (CVE-2026-10740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.82.0` or later.
CVE-2026-11393 Code Injection in Amazon @aws/agentcore (CVE-2026-11393)
code injection in Amazon @aws/agentcore (CVE-2026-11393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-preview.9` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →