CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

AWS — security advisories

38 advisories3 exploitedlatest 2026-07-07⚡ RSS feed

Tracked AWS products:

⚡ Watch AWS

Get an email when a new AWS advisory drops — max one per day, one-click unsubscribe.

CVE-2026-14904 - Improper Link Resolution in Auth.GetUserPrivateKey in AWS Research and Engineering Studio

unknownCVE-2026-14904aws2026-07-07

CVE-2026-14265- Deserialization of Untrusted Data in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

unknownCVE-2026-14265aws2026-07-01

CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib

unknownCVE-2026-13760aws2026-07-01

CVE-2026-13769 – Insecure file permissions in AWS CLI

unknownCVE-2026-13769aws2026-07-01

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF

unknownCVE-2026-13762 CVE-2026-13763aws2026-06-29

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

unknownCVE-2026-12957 CVE-2026-12958aws2026-06-23

CVE-2026-12530 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

criticalCVE-2026-12530aws2026-06-17

CVE-2026-11931 - Insecure Permissions on Authentication Token Cache File in Kiro IDE

unknownCVE-2026-11931aws2026-06-15

CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http

unknownCVE-2026-12043aws2026-06-12

CVE-2026-10740 - Excessive memory allocation in s2n-quic

highCVE-2026-10740aws2026-06-10

CVE-2026-10740 - Excessive memory allocation in s2n-quic

unknownCVE-2026-10740 CVE-2026-11417aws2026-06-10

CVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import

unknownCVE-2026-11393aws2026-06-08

CVE-2026-1386 - Arbitrary Host File Overwrite via Symlink in Firecracker Jailer

unknownCVE-2026-1386aws2026-06-05

CVE-2026-11400 and CVE-2026-11401

lowCVE-2026-11400 CVE-2026-11401aws2026-06-05

CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS

unknownCVE-2026-7191aws2026-06-05

Issues with AWS Research and Engineering Studio (RES)

unknownCVE-2026-5707 CVE-2026-5708 CVE-2026-5709aws2026-06-05

CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflow

highCVE-2026-5190aws2026-06-05

CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python

unknownCVE-2026-6550aws2026-06-05

CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

unknownCVE-2026-4269aws2026-06-05

CVE-2025-8069 - AWS Client VPN Windows Client Local Privilege Escalation

unknownCVE-2025-8069aws2026-06-05

CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver

unknownCVE-2026-8838aws2026-06-05

Improper authentication token handling in the Amazon WorkSpaces client for Linux

unknownCVE-2025-12779aws2026-06-05

Buffer Over-read when receiving improperly sized ICMPv6 packets

unknownCVE-2025-11616 CVE-2025-11617 CVE-2025-11618aws2026-06-05

Unanchored ACCOUNT_ID webhook filters for CodeBuild

unknownaws2026-06-05

CVE-2025-12815 - RES web portal may display preview of Virtual Desktops that the user shouldn't have access to

unknownCVE-2025-12815aws2026-06-05

CVE-2026-31431

unknownexploitedCVE-2026-31431aws2026-06-05

CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing

unknownCVE-2026-8686aws2026-06-05

Ongoing updates on Copy.fail and variants

unknownCVE-2026-46300 CVE-2026-43284 CVE-2026-31431 CVE-2026-43500aws2026-06-05

CVE-2025-66478: RCE in React Server Components

unknownexploitedCVE-2025-66478 CVE-2025-55182aws2026-06-05

Dirty Frag and other issues in Amazon Linux kernels

unknownexploitedCVE-2026-31431aws2026-06-05

CVE-2025-11462 AWS ClientVPN macOS Client Local Privilege Escalation

unknownCVE-2025-11462aws2026-06-05

[Redirected] Security Update for Amazon Q Developer Extension for Visual Studio Code (Version #1.84)

unknownCVE-2025-8217aws2026-06-05

Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)

unknownCVE-2026-8596 CVE-2026-8597aws2026-06-05

CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI

unknownCVE-2026-9255aws2026-06-05

CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

unknownCVE-2026-8178aws2026-06-05

Security Findings in SageMaker Python SDK

unknownCVE-2026-1777 CVE-2026-1778aws2026-06-05

Overly Permissive Trust Policy in Harmonix on AWS EKS

unknownCVE-2025-14503aws2026-06-05

Key Commitment Issues in S3 Encryption Clients

unknownCVE-2025-14763 CVE-2025-14764 CVE-2025-14759 CVE-2025-14760aws2026-06-05