Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how amazon compares to other vendors in security performance

View Risk Score →

Software

amazon kindle
47
amazon freertos
22
amazon fire os
13
amazon opensearch
9
amazon freertos-plus-tcp
8
amazon blink xt2 sync module
7
amazon blink xt2 sync module firmware
7
amazon kindle fire hd
7
amazon athena odbc
6
amazon alexa
5
amazon amazon athena odbc driver
5
amazon aws client vpn
5
amazon firecracker
5
amazon payfort-php-sdk
5
amazon amazon linux
4
amazon amazon web services internet of things device software development kit v2 c\+\+
4
amazon amazon web services internet of things device software development kit v2 java
4
amazon amazon web services internet of things device software development kit v2 node.js
4
amazon amazon web services internet of things device software development kit v2 python
4
amazon aws software development kit
4
amazon echo dot
4
amazon web services
4
amazon amazon web services aws-c-io
3
amazon aws cloud development kit
3
amazon aws cloudformation
3
amazon aws libcrypto
3
amazon aws-lc-sys rust
3
amazon fire tv stick 3rd gen
3
amazon hotpatch
3
amazon kiro ide
3
amazon opensearch notifications
3
amazon research and engineering studio
3
amazon tough rust
3
amazon tuftool rust
3
amazon web services (aws)
3
amazon workspaces client
3
amazon audible
2
amazon aws labs sandbox accounts
2
amazon cloudfront
2
amazon flexible payments service
2
amazon ion
2
amazon kindle firmware
2
amazon kindle for pc
2
amazon kindle touch
2
amazon advanced jdbc wrapper
1
amazon amazon ecs agent
1
amazon amazon ecs container agent
1
amazon amazon key
1
amazon amazon key firmware
1
amazon amazon products to woocommerce
1

Amazon s2n-tlsSilent Drop of TLS 1.3 Encrypted Records in s2n-tls

Risk 52
Severity
8.3
First published (updated )
CVE-2026-16317

Amazon smithy-rs (code generation and runtime framework)Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes

Risk 47
Severity
8.7
First published (updated )
CVE-2026-15957

Amazon Athena Query Federation (Synapse connector)SQL injection in Amazon Athena Synapse connector

Risk 37
Severity
6.1
First published (updated )
CVE-2026-12283

Amazon AWS Load Balancer ControllerCross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller

Risk 73
Severity
5.8
First published (updated )
CVE-2026-15738

Amazon Web Services AWS Advanced JDBC WrapperRCE via Deserialization in AWS Advanced JDBC Wrapper

Risk 79
Severity
7.7
First published (updated )
CVE-2026-14265
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon Web Services Application Load Balancer (ALB) with AWS WAFHTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF

Risk 86
Severity
7.9
First published (updated )
CVE-2026-13763

Amazon CloudFrontHTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF

Risk 86
Severity
7.9
First published (updated )
CVE-2026-13762

Amazon AWS Toolkit for Visual Studio CodeArbitrary file write in Language Servers for AWS

Risk 72
Severity
8.5
First published (updated )
CVE-2026-12958

Amazon s2n-quicExcessive memory allocation in s2n-quic

Risk 33
Severity
6.9
First published (updated )
CVE-2026-10740

Amazon Kiro IDEKiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

Risk 77
Severity
8.6
First published (updated )
CVE-2026-10591
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kiro CLITool Execution Without Authorization via Piped Stdin in Kiro CLI

Risk 54
Severity
8.4
EPSS
0.12%
First published (updated )
CVE-2026-9255

Amazon rabbitmq-awsArbitrary file read in rabbitmq-aws plugin

Risk 32
Severity
8.3
EPSS
0.34%
First published (updated )
CVE-2026-9133

Amazon coreMQTTDoS from MQTT v5.0 Deserialization Fault in core MQTT

Risk 33
Severity
8.7
EPSS
0.39%
First published (updated )
CVE-2026-8686

Amazon Amazon Redshift JDBC DriverRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

Risk 55
Severity
9.2
EPSS
0.03%
First published (updated )
CVE-2026-8178

The RegisterAttackers are cashing in on fresh 'CopyFail' Linux flaw

Exploited
First published (updated )
News
The Register
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerCISA says ‘Copy Fail’ flaw now exploited to root Linux systems

Exploited
First published (updated )
News
BleepingComputer

Amazon Amazon ECS AgentOS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

Risk 49
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-7461

BleepingComputerNew Linux ‘Copy Fail’ flaw gives hackers root on major distros

Exploited
First published (updated )
News
BleepingComputer

Amazon Freertos-plus-tcpOut-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP

Risk 43
Severity
6.1
EPSS
0.02%
First published (updated )
CVE-2026-7426

Amazon Freertos-plus-tcpOut-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP

Risk 27
Severity
6
EPSS
0.02%
First published (updated )
CVE-2026-7425
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Amazon Freertos-plus-tcpInteger Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

Risk 43
Severity
7.2
EPSS
0.02%
First published (updated )
CVE-2026-7424

Amazon Freertos-plus-tcpInteger Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP

Risk 27
Severity
6
EPSS
0.02%
First published (updated )
CVE-2026-7423

Amazon Freertos-plus-tcpMAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing

Risk 29
Severity
7.1
EPSS
0.03%
First published (updated )
CVE-2026-7422

awslabs toughMultiple Path Traversal Variants in awslabs/tough

Risk 34
Severity
7.1
EPSS
0.08%
First published (updated )
CVE-2026-6968

awslabs toughMissing Delegated Metadata Validation in awslabs/tough

Risk 34
Severity
7.1
EPSS
0.02%
First published (updated )
CVE-2026-6967
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

awslabs toughSignature Threshold Bypass in awslabs/tough Delegated Roles

Risk 27
Severity
7
EPSS
0.02%
First published (updated )
CVE-2026-6966

SUSE Linux Enterprise ServerLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Risk 91
Severity
7.8
Exploited
Trending
Year
First published (updated )
CVE-2026-31431

Amazon Web Services AWS EFS CSI DriverAWS EFS CSI Driver Mount Option Injection

Risk 26
Severity
6.9
EPSS
0.04%
First published (updated )
CVE-2026-6437

Amazon FirecrackerOut-of-bounds Write in Firecracker virtio-pci Transport

Risk 49
Severity
8.7
EPSS
0.02%
First published (updated )
CVE-2026-5747

Amazon Research and Engineering StudioAWS Research and Engineering Studio (RES) FileBrowser Command Injection

Risk 56
Severity
7.7
EPSS
0.10%
First published (updated )
CVE-2026-5709
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203