Amazon Web Services - vulnerabilities (CVEs)
10 CVEs in 8 products, 0 in the last 30 days, newest from 2026-06-23.
Products
- Aws-c-io - 4 CVEs
- Aws Iot Device Sdk V2 For C - 4 CVEs
- Aws Iot Device Sdk V2 For Java - 4 CVEs
- Aws Iot Device Sdk V2 For Node.js - 4 CVEs
- Aws Iot Device Sdk V2 For Python - 4 CVEs
- Hotdog - 2 CVEs
- Language Servers For Aws - 2 CVEs
- Log4j-cve-2021-44228-hotpatch - 2 CVEs
Newest CVEs of Amazon Web Services
- CVE-2026-12958 - CVSS 8.5 (high), 2026-06-23: Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local…
- CVE-2026-12957 - CVSS 8.5 (high), 2026-06-23: Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If…
- CVE-2022-0070 - CVSS 8.8 (high), 2022-04-19: Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux…
- CVE-2022-0071 - CVSS 8.8 (high), 2022-04-19: Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM…
- CVE-2021-3100 - CVSS 8.8 (high), 2022-04-19: The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate…
- CVE-2021-3101 - CVSS 8.8 (high), 2022-04-19: Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges…
- CVE-2021-40830 - CVSS 8.8 (high), 2021-11-23: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on…
- CVE-2021-40829 - CVSS 8.8 (high), 2021-11-23: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and…
- CVE-2021-40828 - CVSS 8.8 (high), 2021-11-23: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), Python (versions prior to 1.5.18), C++ (versions prior to 1.12.7) and…
- CVE-2021-40831 - CVSS 7.2 (high), 2021-11-23: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on…
