Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how amazon compares to other vendors in security performance

View Risk Score →

Software

amazon kindle
47
amazon freertos
22
amazon fire os
13
amazon opensearch
9
amazon freertos-plus-tcp
8
amazon blink xt2 sync module
7
amazon blink xt2 sync module firmware
7
amazon kindle fire hd
7
amazon alexa
6
amazon athena odbc
6
amazon amazon athena odbc driver
5
amazon payfort-php-sdk
5
amazon amazon linux
4
amazon amazon web services internet of things device software development kit v2 c\+\+
4
amazon amazon web services internet of things device software development kit v2 java
4
amazon amazon web services internet of things device software development kit v2 node.js
4
amazon amazon web services internet of things device software development kit v2 python
4
amazon aws client vpn
4
amazon aws software development kit
4
amazon firecracker
4
amazon opensearch notifications
4
amazon web services
4
amazon amazon web services aws-c-io
3
amazon aws cloudformation
3
amazon aws libcrypto
3
amazon aws-lc-sys rust
3
amazon echo dot
3
amazon fire tv stick 3rd gen
3
amazon hotpatch
3
amazon research and engineering studio
3
amazon tough rust
3
amazon tuftool rust
3
amazon web services (aws)
3
amazon workspaces client
3
amazon audible
2
amazon aws labs sandbox accounts
2
amazon flexible payments service
2
amazon ion
2
amazon kindle firmware
2
amazon kindle for pc
2
amazon kindle touch
2
amazon kiro ide
2
amazon workspaces
2
amazon amazon ecs agent
1
amazon amazon ecs container agent
1
amazon amazon key
1
amazon amazon key firmware
1
amazon amazon products to woocommerce
1
amazon amazon redshift jdbc driver
1
amazon amazon s3
1

Amazon rabbitmq-awsArbitrary file read in rabbitmq-aws plugin

Risk 32
Severity
8.3
EPSS
0.02%
First published (updated )
CVE-2026-9133

Amazon coreMQTTDoS from MQTT v5.0 Deserialization Fault in core MQTT

Risk 33
Severity
8.7
EPSS
0.03%
First published (updated )
CVE-2026-8686

Amazon Amazon Redshift JDBC DriverRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

Risk 55
Severity
9.2
EPSS
0.03%
First published (updated )
CVE-2026-8178

The RegisterAttackers are cashing in on fresh 'CopyFail' Linux flaw

Exploited
First published (updated )
News
The Register

BleepingComputerCISA says ‘Copy Fail’ flaw now exploited to root Linux systems

Exploited
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon Amazon ECS AgentOS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

Risk 49
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-7461

BleepingComputerNew Linux ‘Copy Fail’ flaw gives hackers root on major distros

Exploited
First published (updated )
News
BleepingComputer

Amazon Freertos-plus-tcpOut-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP

Risk 43
Severity
6.1
EPSS
0.02%
First published (updated )
CVE-2026-7426

Amazon Freertos-plus-tcpOut-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP

Risk 27
Severity
6
EPSS
0.02%
First published (updated )
CVE-2026-7425

Amazon Freertos-plus-tcpInteger Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

Risk 43
Severity
7.2
EPSS
0.02%
First published (updated )
CVE-2026-7424
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon Freertos-plus-tcpInteger Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP

Risk 27
Severity
6
EPSS
0.02%
First published (updated )
CVE-2026-7423

Amazon Freertos-plus-tcpMAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing

Risk 29
Severity
7.1
EPSS
0.03%
First published (updated )
CVE-2026-7422

awslabs toughMultiple Path Traversal Variants in awslabs/tough

Risk 34
Severity
7.1
EPSS
0.08%
First published (updated )
CVE-2026-6968

awslabs toughMissing Delegated Metadata Validation in awslabs/tough

Risk 34
Severity
7.1
EPSS
0.02%
First published (updated )
CVE-2026-6967

awslabs toughSignature Threshold Bypass in awslabs/tough Delegated Roles

Risk 27
Severity
7
EPSS
0.02%
First published (updated )
CVE-2026-6966
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SUSE Linux Enterprise ServerLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Risk 91
Severity
7.8
Exploited
Trending
Year
First published (updated )
CVE-2026-31431

Amazon Research and Engineering StudioAWS Research and Engineering Studio (RES) FileBrowser Command Injection

Risk 56
Severity
7.7
EPSS
0.10%
First published (updated )
CVE-2026-5709

Amazon Research and Engineering StudioImproper Control of User-Modifiable Attributes in RES CreateSession API

Risk 56
Severity
8.7
EPSS
0.04%
First published (updated )
CVE-2026-5708

Amazon Research and Engineering StudioCommand Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)

Risk 56
Severity
8.7
EPSS
0.11%
First published (updated )
CVE-2026-5707

Amazon Web Services Amazon Athena ODBC DriverImproper neutralization of special elements in authentication components in Amazon Athena ODBC driver

Risk 68
Severity
7.3
First published (updated )
CVE-2026-35558
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon Amazon Athena ODBC DriverOut-of-bounds write in query processing components in Amazon Athena ODBC driver

Risk 40
Severity
7.1
First published (updated )
CVE-2026-35559

Amazon Amazon Athena ODBC DriverOS command injection in Amazon Athena ODBC driver on Linux

Risk 51
Severity
7.3
EPSS
0.10%
First published (updated )
CVE-2026-5485

Amazon Amazon Athena ODBC DriverAllocation of resources without limits in parsing components in Amazon Athena ODBC driver

Risk 47
Severity
8.7
First published (updated )
CVE-2026-35562

Amazon Amazon Athena ODBC DriverInsufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver

Risk 86
Severity
9.1
First published (updated )
CVE-2026-35561

Amazon Amazon Athena ODBC DriverImproper certificate validation in identity provider connection components in Amazon Athena ODBC driver

Risk 63
Severity
9.1
First published (updated )
CVE-2026-35560
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon aws-c-event-streamAWS C Event Stream Streaming Decoder Stack Buffer Overflow

Risk 50
Severity
7.7
EPSS
0.02%
First published (updated )
CVE-2026-5190

Amazon aws-mcp-server(0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability

Risk 86
Severity
9.8
First published (updated )
Advisory
ZDI-26-246

Amazon AWS-LCCRL Distribution Point Scope Check Logic Error in AWS-LC

Risk 44
Severity
9.1
EPSS
0.02%
First published (updated )
CVE-2026-4428

we found a memory exhaustion CVE in a library downloaded 29 million times a month. AWS, DataHub, and Lightning AI are in the blast radius.

First published (updated )
Social
reddit

npm/bedrock-agentcore-starter-toolkitImproper S3 ownership verification in Bedrock AgentCore Starter Toolkit

Risk 51
Severity
5.8
EPSS
0.05%
First published (updated )
CVE-2026-4269
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203