Known Vulnerabilities for products from Amazon
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Amazon".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Amazon can be found at device.report : Amazon
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75936 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-75935 json | Not Provided | 2026-08-18 | 2026-08-19 | |
| CVE-2026-75910 json | Not Provided | 2026-08-20 | 2026-08-20 | |
| CVE-2026-68872 json | Not Provided | 2026-08-10 | 2026-08-11 | |
| CVE-2026-61448 json | Not Provided | 2026-07-11 | 2026-07-13 | |
| CVE-2026-53961 json | Not Provided | 2026-07-09 | 2026-07-10 | |
| CVE-2026-53034 json | Not Provided | 2026-06-24 | 2026-06-24 | |
| CVE-2026-50196 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-45534 json | Not Provided | 2026-07-15 | 2026-07-16 | |
| CVE-2026-35562 json | Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a th... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-35561 json | Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver bef... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-35560 json | Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 mi... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-35559 json | Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-35558 json | Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 migh... | Not Provided | 2026-04-03 | 2026-07-24 |
| CVE-2026-19643 json | Not Provided | 2026-08-12 | 2026-08-13 | |
| CVE-2026-19642 json | An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated u... | Not Provided | 2026-08-12 | 2026-08-18 |
| CVE-2026-18954 json | Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow a... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-18953 json | Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-serv... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-18657 json | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor t... | Not Provided | 2026-08-04 | 2026-08-18 |
| CVE-2026-18656 json | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor ... | Not Provided | 2026-08-04 | 2026-08-18 |
Known software with vulnerabilities from Amazon
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Amazon | Amazon Freertos | 1.0.0 |
| Application | Amazon | Amazon Music | 6.1.5.1213 |
| Application | Amazon | Amazon Web Services Cloudformation Bootstrap | - |
| Application | Amazon | Amazon Web Services Freertos | 1.0.0 |
| Application | Amazon | Amazon Web Services Software Development Kit | 2.0.5 |
| Application | Amazon | Audible | 2.34.0 |
| Application | Amazon | Aws-lambda | 0.0.1 |
| Application | Amazon | Aws Command Line Interface | - |
| Operating System | Amazon | Aws Command Line Interface | - |
| Application | Amazon | Aws Encryption Sdk | - |
| Application | Amazon | Aws Javascript S3 Explorer | 1.0.0 |
| Application | Amazon | Aws S3 Crypto Sdk | - |
| Application | Amazon | Aws Sdk For Javascipt | - |
| Application | Amazon | Aws Shared Configuration File Loader | 0.1.0 |
| Hardware | Amazon | Blink Xt2 Sync Module | - |
| Operating System | Amazon | Blink Xt2 Sync Module Firmware | 2.13.11 |
| Application | Amazon | Corretto | 11 |
| Application | Amazon | Ec2 Api Tools Java Library | - |
| Application | Amazon | Elastic Load Balancing Api Tools | - |
| Application | Amazon | Firecracker | 0.1.0 |