SecAlerts
A

Amazon

Security Risk Profile

57
/100
medium

Security Risk Score

Comprehensive risk assessment based on 363 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 19, 2007 to present

363
Total CVEs
177
Critical+High
17
Exploited
132
Unpatched

Threat Assessment

Avg CVSS
7.5
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
132
Critical/High
Risk Level
57/100
medium
⚠️ 17 Active Exploits⚡ 2 Zero-Days🆕 1Fresh (<7d)📈 11 in Last 30 Days

Severity Distribution

Critical
39
High
138
Medium
101
Low
1

Exploit Likelihood

>50% chance
1
20-50%
0
5-20%
0
<5%
57

Age Distribution

Common Weaknesses (CWE)

1
OS Command Injection
15
2
Infoleak
12
3
Command Injection
11
4
Input Validation
11
5
Buffer Overflow
11

Most Affected Products

1. Cisco Identity Services Engine60
2. Amazon Kindle48
3. FreeBSD FreeBSD29
4. SUSE Linux Enterprise Server27
5. Amazon Aws-sigv4 Rust24

Recent Vulnerabilities

See more →
CVE-2026-119085
CVSS 9.4critical

Template injection in the publishing component of awslabs Virtual Engineering Workbench

Nov 2, 2026🔧 No Patch
CVE-2026-115416
CVSS 6.3medium

Incorrect authorization checks in Amazon Athena engine version 3 query processing

Oct 22, 2026🔧 No Patch
CVE-2026-112408
CVSS 9.4critical

Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Oct 21, 2026🔧 No Patch
CVE-2026-102552
CVSS 8.2high

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

Oct 16, 2026🔧 No Patch
CVE-2026-102551
CVSS 9.2critical

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Oct 16, 2026🔧 No Patch
CVE-2026-109588
CVSS 9.3critical

Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel

Oct 16, 2026🔧 No Patch
CVE-2026-109587
CVSS 9.3critical

Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel

Oct 16, 2026🔧 No Patch
CVE-2026-110812
CVSS 9.4critical

Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

Oct 15, 2026🔧 No Patch
CVE-2026-110310
CVSS 6.0medium

RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

Oct 14, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/162
unknown

Multiple TLS libraries: X.509 Name Constraints enforcement bypasses (CVE-2026-34073, CVE-2026-3833, CVE-2026-5263, CVE-2026-33810; CERT/CC VU#573195, VU#948176, VU#410595)

Oct 14, 2026🔧 No Patch

Monitor Amazon in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

Amazon Security Vulnerabilities & Risk Score | 363 CVEs | SecAlerts - SecAlerts