# Amazon Web Services CVEs > Amazon Web Services: 179 CVEs mapped to its software or packages (0 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/aws/cves Last updated: 2026-10-23T19:04:44Z 179 CVEs map to Amazon Web Services (0 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Amazon Web Services](https://rewindex.com/company/aws.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Amazon Web Services’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-23 | [CVE-2026-115845](https://rewindex.com/cve/CVE-2026-115845.md) | Incomplete validation in the run\_script Python sandbox in AWS MCP Server | 6.4 medium | | | 2026-10-23 | [CVE-2026-115813](https://rewindex.com/cve/CVE-2026-115813.md) | Server-side request forgery in the model download path in Amazon Web Services Multi Model Server | 5.8 medium | | | 2026-10-23 | [CVE-2026-115812](https://rewindex.com/cve/CVE-2026-115812.md) | Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server | 9.8 critical | | | 2026-10-22 | [CVE-2026-115417](https://rewindex.com/cve/CVE-2026-115417.md) | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt | 7.5 high | | | 2026-10-22 | [CVE-2026-115419](https://rewindex.com/cve/CVE-2026-115419.md) | Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server | 8.1 high | | | 2026-10-22 | [CVE-2026-115414](https://rewindex.com/cve/CVE-2026-115414.md) | OS command injection in the Terraform hook in AWS SAM CLI | 7.8 high | | | 2026-10-22 | [CVE-2026-115416](https://rewindex.com/cve/CVE-2026-115416.md) | Incorrect authorization checks in Amazon Athena engine version 3 query processing | 7.7 high | | | 2026-10-21 | [CVE-2026-112408](https://rewindex.com/cve/CVE-2026-112408.md) | Missing bucket ownership verification in Amazon SageMaker Python SDK default\_bucket() | 8.1 high | | | 2026-10-21 | [CVE-2026-109619](https://rewindex.com/cve/CVE-2026-109619.md) | RCE via stale global state | 8.1 high | | | 2026-10-21 | [CVE-2026-109618](https://rewindex.com/cve/CVE-2026-109618.md) | RCE via OOM corruption | 9.8 critical | | | 2026-10-21 | [CVE-2026-111943](https://rewindex.com/cve/CVE-2026-111943.md) | Distrust compromised intermediate certificates in crypto/x509 | n/a | | | 2026-10-20 | [CVE-2026-112407](https://rewindex.com/cve/CVE-2026-112407.md) | Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications | 8.8 high | | | 2026-10-20 | [CVE-2026-112380](https://rewindex.com/cve/CVE-2026-112380.md) | Missing authorization in the WhatsApp channel in Kiro Crew | 9.9 critical | | | 2026-10-16 | [CVE-2026-102552](https://rewindex.com/cve/CVE-2026-102552.md) | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver | 5.9 medium | | | 2026-10-16 | [CVE-2026-102551](https://rewindex.com/cve/CVE-2026-102551.md) | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling | 7.7 high | | | 2026-10-16 | [CVE-2026-109588](https://rewindex.com/cve/CVE-2026-109588.md) | Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel | 8.8 high | | | 2026-10-16 | [CVE-2026-109587](https://rewindex.com/cve/CVE-2026-109587.md) | Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel | 8.8 high | | | 2026-10-15 | [CVE-2026-110812](https://rewindex.com/cve/CVE-2026-110812.md) | Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune | 9.9 critical | | | 2026-10-15 | [CVE-2026-99999](https://rewindex.com/cve/CVE-2026-99999.md) | ipv4: validate checksum\_start before completing checksum | 9.3 critical | | | 2026-10-14 | [CVE-2026-110310](https://rewindex.com/cve/CVE-2026-110310.md) | RSA PKCS\#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET | 5.3 medium | | | 2026-10-14 | [CVE-2026-110248](https://rewindex.com/cve/CVE-2026-110248.md) | Insertion of sensitive information into log files in Amazon SageMaker Python SDK git\_utils\[.\]py | 5.3 medium | | | 2026-10-09 | [CVE-2026-108096](https://rewindex.com/cve/CVE-2026-108096.md) | Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category | 6.5 medium | | | 2026-10-09 | [CVE-2026-107783](https://rewindex.com/cve/CVE-2026-107783.md) | Insertion of sensitive information into log file in AWS Tools for PowerShell | 5.9 medium | | | 2026-10-08 | [CVE-2026-107608](https://rewindex.com/cve/CVE-2026-107608.md) | Improper link resolution in asset bundling output handling in aws-cdk-lib | 5.5 medium | | | 2026-10-08 | [CVE-2026-107322](https://rewindex.com/cve/CVE-2026-107322.md) | OS command injection in Amazon Agent Plugins for AWS databases-on-aws | 7.8 high | | | 2026-10-08 | [CVE-2026-107332](https://rewindex.com/cve/CVE-2026-107332.md) | Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code | 5.5 medium | | | 2026-10-07 | [CVE-2026-107352](https://rewindex.com/cve/CVE-2026-107352.md) | Missing authorization checks in Amazon Athena engine version 3 request handling | 7.7 high | | | 2026-10-06 | [CVE-2026-106032](https://rewindex.com/cve/CVE-2026-106032.md) | Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import | 5.7 medium | | | 2026-10-06 | [CVE-2026-105812](https://rewindex.com/cve/CVE-2026-105812.md) | Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import | 9.0 critical | | | 2026-10-06 | [CVE-2026-105811](https://rewindex.com/cve/CVE-2026-105811.md) | Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS | 6.5 medium | | | 2026-10-02 | [CVE-2026-104019](https://rewindex.com/cve/CVE-2026-104019.md) | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio | 9.0 critical | | | 2026-10-02 | [CVE-2026-103958](https://rewindex.com/cve/CVE-2026-103958.md) | Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS | 7.6 high | | | 2026-10-02 | [CVE-2026-103957](https://rewindex.com/cve/CVE-2026-103957.md) | Server-side request forgery in the OAuth2 discovery handling in Loom for AWS | 6.2 medium | | | 2026-10-02 | [CVE-2026-103956](https://rewindex.com/cve/CVE-2026-103956.md) | Missing authentication for critical function in Loom for AWS | 10.0 critical | | | 2026-10-01 | [CVE-2026-104002](https://rewindex.com/cve/CVE-2026-104002.md) | Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) | 5.3 medium | | | 2026-10-01 | [CVE-2026-104020](https://rewindex.com/cve/CVE-2026-104020.md) | Uncontrolled recursion in the Ion reader in Amazon Ion Python | 7.5 high | | | 2026-10-01 | [CVE-2026-97662](https://rewindex.com/cve/CVE-2026-97662.md) | Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace | 8.2 high | | | 2026-10-01 | [CVE-2026-103505](https://rewindex.com/cve/CVE-2026-103505.md) | AWS EFS CSI Driver Mount Option Injection via mounttargetipmap | 6.5 medium | | | 2026-09-29 | [CVE-2026-100308](https://rewindex.com/cve/CVE-2026-100308.md) | GluonTS arbitrary command execution during model deserialization | 7.8 high | | | 2026-09-24 | [CVE-2026-96883](https://rewindex.com/cve/CVE-2026-96883.md) | Type confusion in AWS pgcollection allows remote code execution | 8.8 high | | | 2026-09-24 | [CVE-2026-95985](https://rewindex.com/cve/CVE-2026-95985.md) | Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces | 8.8 high | | | 2026-09-22 | [CVE-2026-94450](https://rewindex.com/cve/CVE-2026-94450.md) | Potential denial of service when configured to send Retry packets in s2n-quic | 7.5 high | | | 2026-09-22 | [CVE-2026-94384](https://rewindex.com/cve/CVE-2026-94384.md) | Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda | 8.1 high | | | 2026-09-17 | [CVE-2026-92943](https://rewindex.com/cve/CVE-2026-92943.md) | Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python | 8.1 high | | | 2026-09-16 | [CVE-2026-86831](https://rewindex.com/cve/CVE-2026-86831.md) | Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS | 8.7 high | | | 2026-09-14 | [CVE-2026-86830](https://rewindex.com/cve/CVE-2026-86830.md) | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center | 7.2 high | | | 2026-09-11 | [CVE-2026-89332](https://rewindex.com/cve/CVE-2026-89332.md) | Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration | 5.5 medium | | | 2026-09-11 | [CVE-2026-89090](https://rewindex.com/cve/CVE-2026-89090.md) | Denial of service in the event stream header decoder in AWS SDK for Go v2 | 5.9 medium | | | 2026-09-11 | [CVE-2026-18061](https://rewindex.com/cve/CVE-2026-18061.md) | Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin | 5.9 medium | | | 2026-09-11 | [CVE-2026-89066](https://rewindex.com/cve/CVE-2026-89066.md) | OS command injection in the task synthesis component in projen | 7.8 high | | Next page: [page 2](https://rewindex.com/company/aws/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Amazon Web Services) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 1 | 0 | 0 | 0 | | 2025-11-10 | 0 | 1 | 0 | 0 | 0 | 0 | | 2025-11-17 | 0 | 0 | 1 | 0 | 0 | 0 | | 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 1 | 6 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 1 | 0 | 1 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 2 | 1 | 0 | 0 | 0 | | 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-16 | 0 | 3 | 1 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 4 | 0 | 0 | 0 | 0 | | 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-20 | 1 | 1 | 4 | 0 | 0 | 0 | | 2026-04-27 | 0 | 4 | 3 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-05-18 | 1 | 3 | 0 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 3 | 1 | 0 | 0 | 0 | | 2026-06-08 | 1 | 2 | 1 | 0 | 0 | 0 | | 2026-06-15 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-06-22 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-06-29 | 2 | 2 | 1 | 0 | 0 | 0 | | 2026-07-06 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-07-13 | 0 | 2 | 3 | 0 | 0 | 0 | | 2026-07-20 | 0 | 4 | 1 | 0 | 0 | 0 | | 2026-07-27 | 1 | 3 | 0 | 0 | 0 | 0 | | 2026-08-03 | 0 | 4 | 3 | 0 | 0 | 0 | | 2026-08-10 | 0 | 3 | 2 | 0 | 0 | 0 | | 2026-08-17 | 1 | 3 | 1 | 0 | 0 | 0 | | 2026-08-24 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-08-31 | 0 | 4 | 1 | 0 | 0 | 0 | | 2026-09-07 | 3 | 3 | 6 | 0 | 0 | 0 | | 2026-09-14 | 0 | 3 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 4 | 0 | 0 | 0 | 0 | | 2026-09-28 | 2 | 4 | 3 | 0 | 0 | 0 | | 2026-10-05 | 1 | 2 | 6 | 0 | 0 | 0 | | 2026-10-12 | 2 | 3 | 3 | 0 | 0 | 0 | | 2026-10-19 | 3 | 7 | 2 | 0 | 1 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/aws/cves · Markdown: https://rewindex.com/company/aws/cves.md · JSON: https://rewindex.com/api/v1/companies/aws/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:46:03.936Z