[ Vendor · 4 CVEs ]
Amazon
CVEs affecting Amazon published in the last 30 days, plus any Amazon CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112380 | 20 Oct 2026 | CVSS 9.9 | Amazon Kiro CrewMissing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group… | |
| CVE-2026-110310 | 14 Oct 2026 | CVSS 5.3 | Amazon.Extensions.S3.EncryptionA remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's… | |
| CVE-2026-104020 | 1 Oct 2026 | CVSS 7.5 | Amazon ion-pythonUncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using… | |
| CVE-2026-95985 | 24 Sep 2026 | CVSS 8.8 | Amazon Kiro IDEThe file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the… |