Amazon Web Services vulnerabilities

CVEs per yearBy the year they were published

1. 20214
2. 20224
3. 20262

Newest CVEs

• CVE-2026-12958

  Arbitrary file write in Language Servers for AWS

  Amazon Web Services · Language Servers for AWS

  High8.5
• CVE-2026-12957

  Arbitrary Code Execution in Language Servers for AWS

  Amazon Web Services · Language Servers for AWS

  High8.5
• CVE-2022-0071

  Hotdog Container Escape

  Amazon Web Services · Hotdog

  High8.8
• CVE-2022-0070

  Log4j hot patch package privilege escalation

  Amazon Web Services · log4j-cve-2021-44228-hotpatch

  High8.8
• CVE-2021-3101

  Hotdog Container Escape

  Amazon Web Services · Hotdog

  High8.8
• CVE-2021-3100

  Log4j hot patch package privilege escalation

  Amazon Web Services · log4j-cve-2021-44228-hotpatch

  High8.8
• CVE-2021-40831

  Missing SNI validation and inconsistent CA override function behavior within AWS IoT Device SDKs on Apple devices

  Amazon Web Services · AWS IoT Device SDK v2 for Java

  Medium6.3
• CVE-2021-40830

  Inconsistent CA override function behavior within AWS IoT Device SDKs on Unix systems

  Amazon Web Services · AWS IoT Device SDK v2 for Java

  Medium6.3
• CVE-2021-40829

  TLS hostname validation issues within AWS IoT Device SDKs on macOS

  Amazon Web Services · AWS IoT Device SDK v2 for Java

  Medium6.3
• CVE-2021-40828

  TLS hostname validation issues within AWS IoT Device SDKs on Windows

  Amazon Web Services · AWS IoT Device SDK v2 for Java

  Medium6.3