Amazon vulnerabilities
We track 75 vulnerabilities in Amazon products across 60+ products. 75 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest Amazon vulnerabilities
- 7.1 High severity
amazon-braket-schemas: Use of Externally-Controlled Input to Select Classes or Code
Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine that retrieves the quan
- 8.1 High severity
babelfish-for-postgresql: Out-of-bounds Read
An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent p
- 9.8 Critical severity
babelfish-for-postgresql: Heap-based Buffer Overflow
A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS command
- 8.8 High severity
babelfish-for-postgresql: Incorrect Privilege Assignment
Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish may allow remote authenticated users to elevate their privileges. To remediate this issue, w
- 9.9 Critical severity
Kiro Crew: Missing Authorization
Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via
- 7.5 High severity
ion-python: Uncontrolled Recursion
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue
- 8.8 High severity
Kiro IDE: Acceptance of Extraneous Untrusted Data With Trusted Data
The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message
- 8.1 High severity
amazon-connect-salesforce-lambda: Missing Authorization
Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly
- 7.5 High severity
ca-certificates: Incorrect Resource Transfer Between Spheres
The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.
- 9.1 Critical severity
Deep Java Library: Integer Overflow or Wraparound
An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of servi
- 7.5 High severity
ion-java: Improper Handling of Highly Compressed Data (Data Amplification)
Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insufficient covera
- 7.8 High severity
log4j-cve-2021-44228-hotpatch: Improper Neutralization of Special Elements used in an OS Command
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.
- 7.8 High severity
awslabs.dynamodb-mcp-server: Improper Neutralization of Special Elements Used in a Template Engine
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via
- 7.5 High severity
ion-c: Uncontrolled Recursion
An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.
- 8.8 High severity
OpenSearch: Deserialization of Untrusted Data
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter t
- 8.8 High severity
amazon-ssm-agent: Relative Path Traversal
Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose ssm:SendCommand permission is restricted to the AWS-DownloadContent document, to
- 8.4 High severity
FreeRTOS-Kernel: Out-of-bounds Read
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to vers
- 7.3 High severity
FreeRTOS-Kernel: Out-of-bounds Write
Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users shoul
- 7.3 High severity
FreeRTOS-Kernel: Use After Free
Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issu
- 8.8 High severity
FreeRTOS-Kernel: Incorrect Authorization
Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.
- 7.8 High severity
Kiro CLI: Uncontrolled Search Path Element
An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections
- 7.8 High severity
Kiro IDE: Uncontrolled Search Path Element
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protection
- 8.5 High severity
aws-load-balancer-controller: Improper Isolation or Compartmentalization
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HT
- 8.8 High severity
AWS Advanced JDBC Wrapper: Deserialization of Untrusted Data
Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that
- 9.8 Critical severity
AWS Application Load Balancer: Inconsistent Interpretation of HTTP Requests
Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only
- 9.8 Critical severity
Amazon CloudFront: Inconsistent Interpretation of HTTP Requests
Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial bo
- 8.1 High severity
Amazon Redshift JDBC Driver: Use of Externally-Controlled Input to Select Classes or Code
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentiall
- 7.8 High severity
Workspaces: Time-of-check Time-of-use (TOCTOU) Race Condition
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file
- 7.2 High severity
Amazon ECS Agent: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privile
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the
- 8.8 High severity
Research and Engineering Studio (RES): Improperly Controlled Modification of Dynamically-Determined Object Attributes
Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance
- 8.8 High severity
Research and Engineering Studio (RES): Improper Neutralization of Special Elements used in an OS Command
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual deskto
- 7.8 High severity
Amazon Athena ODBC driver: Improper Neutralization of Special Elements used in an OS Command
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a
- 7.5 High severity
Amazon Athena ODBC driver: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's pa
- 9.8 Critical severity
Amazon Athena ODBC driver: Missing Authorization
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-ba
- 7.8 High severity
Amazon Athena ODBC driver: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that
- 7.5 High severity
AWS-LC: Improper Verification of Cryptographic Signature
Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using AWS-
- 7.5 High severity
AWS-LC: Improper Certificate Validation
Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take acti
- 7.2 High severity
Harmonix on AWS: Incorrect Privilege Assignment
An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account roo
- 8.8 High severity
Amazon WorkSpaces: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaces to other local users on the same client machine. Under certain circumstances,