A
Vendor security profile1 actively exploited CVEs
amazon
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs49
Critical6
CISA KEV1
Public exploit6
Patch rate%71
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
3
11
1
3
3
14
6
1
CVE KEV
CVE severity distribution
49toplam CVE
Critical6 (12%)
High29 (59%)
Medium14 (29%)
Patch and exploitation view
%71
Verified patch
%2
CISA KEV
%12
Public exploit
35Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
7.5
CVE-2026-104020
Uncontrolled recursion in the Ion reader in Amazon Ion Python
A
Patch verifiedEPSS %0
8.8
CVE-2026-95985
Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
A
Patch verifiedEPSS %0
8.1
CVE-2026-94384
Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda
A
Patch verifiedEPSS %0
7.5
CVE-2023-32803
Vulnerability in Amazon Ca Certificates
A
Patch status unknownEPSS %0
5.5
CVE-2026-89332
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
A
Patch verifiedEPSS %0
5.9
CVE-2026-18061
Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
A
Patch verifiedEPSS %0
9.1
CVE-2026-85228
Integer overflow in tensor buffer validation in Deep Java Library
A
Patch verifiedEPSS %1
8.8
CVE-2026-83497
Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
O
Patch verifiedEPSS %1
8.7
CVE-2026-81849
Path traversal in the aws:downloadContent plugin in amazon-ssm-agent
A
Patch verifiedEPSS %1
6.8
CVE-2026-81838
Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)
A
Patch verifiedEPSS %0