Vulnerabilities
AWS Alerts Users to Critical Sandbox Bypass in QnABot Service
A new advisory from Amazon Web Services details a high-severity vulnerability allowing arbitrary code execution through a sandbox escape.
Vulnerabilities
Vulnerabilities
AWS Advisories on CVE-2026-7461 OS Command Injection in ECS Agent
Amazon Web Services disclosed a command injection flaw in the ECS Agent that affects users with FSx Windows File Server volumes.
Vulnerabilities
AWS Advises of Remote Code Execution Flaw in Amazon Redshift JDBC Driver
A vulnerability in the Amazon Redshift JDBC driver allows remote code execution through unsafe class loading, posing risks to connected applications.
Vulnerabilities
AWS Issues Advisory for Kiro CLI Authorization Bypass Vulnerability
A new security bulletin highlights an authorization bypass flaw in the Kiro CLI, allowing unauthorized tool execution via piped standard input.
Vulnerabilities
AWS Issues Security Bulletins for CVE-2026-11400 and CVE-2026-11401
Amazon Web Services has published advisory details for two new vulnerabilities, identified as CVE-2026-11400 and CVE-2026-11401, requiring immediate attention.
Vulnerabilities
AWS WAF Vulnerabilities Allow HTTP/2 Multi-Frame Request Bypass
AWS issued a security bulletin for two CVEs in WAF that could let attackers bypass inspection rules via HTTP/2 multi-frame requests.
Vulnerabilities
WatchTowr Labs Discloses PaperCut Pre-Auth RCE Chain and Patch Bypasses
WatchTowr Labs has published a research report detailing a chain of vulnerabilities in PaperCut software that allows for pre-authentication remote code execution.
Vulnerabilities
PC Shipments Drop 20.1 Percent in Sharpest Decline Since Early 2023
Global PC sales fell over 20 percent, marking the steepest drop since the first quarter of 2023, signaling a potential new downward cycle.
Vulnerabilities
AWS Encryption SDK for Python Vulnerability Allows Policy Bypass via Shared Key Cache
A flaw in the AWS Encryption SDK for Python allows attackers to bypass key commitment policies by exploiting a shared key cache mechanism.
Vulnerabilities
AWS patches mount option injection flaw in EFS CSI Driver
Amazon Web Services released a security bulletin for CVE-2026-6437, addressing a vulnerability in the EFS CSI Driver that could allow unauthorized file system access.
Vulnerabilities
AWS Issues Security Bulletin for Research and Engineering Studio Issues
Amazon Web Services has published a security bulletin addressing issues within its Research and Engineering Studio service.
Vulnerabilities
AWS Issues Security Bulletin for Amazon Athena ODBC Driver Vulnerabilities
Amazon Web Services has released a security bulletin addressing issues within the Amazon Athena ODBC Driver, urging users to review their configurations.
Vulnerabilities
AWS Addresses Dirty Frag and Other Kernel Vulnerabilities in Amazon Linux
Amazon Web Services has released security bulletins addressing multiple kernel flaws, including the high-severity Dirty Frag issue, in its Linux distributions.
Vulnerabilities
AWS Advises of Linux Kernel Local Privilege Escalation via ESP-in-TCP Flaw
Amazon Web Services issued a security bulletin regarding a local privilege escalation vulnerability in the Linux kernel involving ESP-in-TCP implementation.
Vulnerabilities
AWS Advises on FreeRTOS-Plus-TCP DHCPv6 Integer Underflow Vulnerability
Amazon Web Services published a security bulletin detailing CVE-2026-7424, an integer underflow flaw in the FreeRTOS-Plus-TCP stack’s DHCPv6 sub-option parser.
Vulnerabilities
AWS Updates Security Bulletin on Copy.fail Malware and Related Variants
Amazon Web Services has issued an ongoing advisory regarding the Copy.fail malware campaign, detailing detection methods and mitigation strategies for cloud customers.
Vulnerabilities
AWS Issues Security Bulletin for CVE-2026-31431
Amazon Web Services has published a new security bulletin addressing vulnerability CVE-2026-31431, providing initial guidance for customers.
Vulnerabilities
AWS Advises on FreeRTOS-Plus-TCP MAC Validation and ICMP Underflow Flaws
Amazon Web Services issued a security bulletin addressing two vulnerabilities in FreeRTOS-Plus-TCP that involve MAC address bypass and integer underflow.
Vulnerabilities
AWS Kiro IDE Vulnerability Allows Unauthorized Writes to Execution Paths
A flaw in the Kiro IDE permits insufficient file write restrictions, potentially leading to code execution risks for users of the development environment.
Vulnerabilities
AWS Issues Advisory for CVE-2026-11931 Insecure Permissions in Kiro IDE
An AWS security bulletin highlights a vulnerability in the Kiro IDE where insecure permissions on authentication token cache files could expose sensitive credentials.
Vulnerabilities
AWS Discloses Excessive Memory Allocation Flaw in s2n-quic Library
Amazon Web Services has published a security bulletin detailing a high-severity memory allocation issue within its open-source s2n-quic library.
Vulnerabilities
AWS Advises of Heap Double-Free Vulnerability in Common Runtime HTTP Component
Amazon Web Services disclosed CVE-2026-12043, a heap double-free flaw in its Common Runtime library that could impact services using aws-c-http.
Vulnerabilities
AWS Issues Advisory for OS Command Injection in CDK NodejsFunction Bundling
A high-severity vulnerability in the AWS CDK library allows attackers to execute arbitrary commands during Docker bundling of Node.js functions.
Vulnerabilities
AWS Issues Security Bulletins for Two Vulnerabilities in Amazon Q Developer Plugins
Amazon Web Services has published advisories for two issues in its Language Servers for AWS and Amazon Q Developer, affecting IDE integrations.