Vulnerabilities
AWS Advises on CVE-2026-5190: Stack Buffer Overflow in C Event Stream Decoder
Amazon Web Services has issued a security bulletin regarding a stack buffer overflow vulnerability in its C Event Stream Streaming Decoder.
Security Bulletin
Everything Threat Times has reported about Security Bulletin: 10 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Discloses Out-of-Bounds Write Vulnerability in Firecracker virtio-pci Transport
AWS has published a security bulletin detailing CVE-2026-5747, an out-of-bounds write flaw in the Firecracker microvm manager’s virtio-pci transport component.
Vulnerabilities
AWS Issues Security Bulletin for Research and Engineering Studio Issues
Amazon Web Services has published a security bulletin addressing issues within its Research and Engineering Studio service.
Vulnerabilities
AWS Issues Security Bulletin for Amazon Athena ODBC Driver Vulnerabilities
Amazon Web Services has released a security bulletin addressing issues within the Amazon Athena ODBC Driver, urging users to review their configurations.
Vulnerabilities
AWS Updates Security Bulletin on Copy.fail Malware and Related Variants
Amazon Web Services has issued an ongoing advisory regarding the Copy.fail malware campaign, detailing detection methods and mitigation strategies for cloud customers.
Vulnerabilities
AWS Issues Security Bulletin for CVE-2026-31431
Amazon Web Services has published a new security bulletin addressing vulnerability CVE-2026-31431, providing initial guidance for customers.
Vulnerabilities
AWS Kiro IDE Vulnerability Allows Unauthorized Writes to Execution Paths
A flaw in the Kiro IDE permits insufficient file write restrictions, potentially leading to code execution risks for users of the development environment.
Vulnerabilities
AWS Issues Security Bulletins for Two Vulnerabilities in Amazon Q Developer Plugins
Amazon Web Services has published advisories for two issues in its Language Servers for AWS and Amazon Q Developer, affecting IDE integrations.
Vulnerabilities
AWS PowerShell Tool Exposes Cleartext Console Passwords in Logs
A flaw in AWS Tools for PowerShell before version 5.0.306 allows local users to recover IAM user passwords from log files and command output.
Vulnerabilities
AWS warns of high-severity RCE in Redshift Python driver; no patch available for CVE-2026-8838 yet
A flaw in the amazon-redshift-python-driver allows attackers to execute arbitrary code remotely, prompting an urgent security bulletin from Amazon Web Services.