AWS vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20232
3. 20244
4. 202527
5. 2026154

Newest CVEs

• CVE-2026-119924

  Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

  AWS · babelfish-for-postgresql

  High7.2
• CVE-2026-119923

  Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

  AWS · babelfish-for-postgresql

  Critical9.3
• CVE-2026-122193

  OS command injection in the example SSM documents in Trusted Remote Execution (REX)

  AWS · trusted-remote-execution

  Critical9.3
• CVE-2026-119083

  GluonTS arbitrary file write during archive extraction

  AWS · gluonts

  High8.4
• CVE-2026-122266

  Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

  AWS · aws-network-policy-agent

  Medium6.3
• CVE-2026-122192

  Guest access to Firecracker process memory after a failed memory discard

  AWS · firecracker

  High7.1
• CVE-2026-119084

  Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

  AWS · amazon-redshift-jdbc-driver

  Critical9.2
• CVE-2026-121652

  Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

  AWS · maplibre-gl-js-amplify

  Medium4.8
• CVE-2026-119922

  Babelfish for PostgreSQL Privilege Escalation

  AWS · babelfish-for-postgresql

  High8.7
• CVE-2026-116635

  Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

  AWS · aws-serverless-mcp-server

  Medium6.9