Amazon vulnerabilities
230 vulnerabilities
Known vulnerabilities in Amazon products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 131 products.
Products
50 of 131- Freertos22 vulnerabilities
- Amazon Web Services Freertos14 vulnerabilities
- Fire Os13 vulnerabilities
- Opensearch11 vulnerabilities
- Tough10 vulnerabilities
- Freertos Plus Tcp9 vulnerabilities
- Blink Xt2 Sync Module7 vulnerabilities
- Athena Odbc6 vulnerabilities
- Aws Software Development Kit6 vulnerabilities
- Data.All5 vulnerabilities
- Firecracker5 vulnerabilities
- Kiro Ide5 vulnerabilities
- Payfort Php Sdk5 vulnerabilities
- Amazon Web Services Internet Of Things Device Software Development Kit V24 vulnerabilities
- Aws Cloud Development Kit4 vulnerabilities
- Amazon Web Services Aws C Io3 vulnerabilities
- Aws Libcrypto3 vulnerabilities
- Aws Lc Sys3 vulnerabilities
- Echo Dot3 vulnerabilities
- Kindle3 vulnerabilities
- Opensearch Data Prepper3 vulnerabilities
- Research And Engineering Studio3 vulnerabilities
- Tuftool3 vulnerabilities
- Advanced Jdbc Wrapper2 vulnerabilities
- Amazon Linux2 vulnerabilities
- Amazon Web Services Redshift Java Database Connectivity Driver2 vulnerabilities
- Audible2 vulnerabilities
- Aws Client Vpn2 vulnerabilities
- Aws Encryption Sdk2 vulnerabilities
- Aws S3 Crypto Sdk2 vulnerabilities
- Awslabs Sandbox Accounts For Events2 vulnerabilities
- Fire TV Stick 3Rd Gen2 vulnerabilities
- Kindle For Pc2 vulnerabilities
- Kindle Touch2 vulnerabilities
- Kiro Cli2 vulnerabilities
- Log4Jhotpatch2 vulnerabilities
- Opensearch Security2 vulnerabilities
- Strands Agents Tools2 vulnerabilities
- Workspaces2 vulnerabilities
- Workspaces Client2 vulnerabilities
- Alexa1 vulnerabilities
- Amazon Cloudfront1 vulnerabilities
- Amazon Ecs Container Agent1 vulnerabilities
- Amazon Ion Dotnet1 vulnerabilities
- Amazon Key1 vulnerabilities
- Amazon Music1 vulnerabilities
- Amazon Music Player1 vulnerabilities
- Amazon Opensearch Service1 vulnerabilities
- Amazon Redshift JDBC Driver1 vulnerabilities
- Amazon Redshift ODBC Driver1 vulnerabilities
CVE-2026-110310amazonamazon.extensions.s3.encryption
EPSS score0.51%
A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS#1 v1.5 padding oracle to recover the RSA-wrapped envelope key and decrypt the object.
To remediate this issue, we recommend that users upgrade to version 3.2.2 or 4.0.3. The 1.x and 2.x lines will not be patched, users of those lines need to migrate to 3.2.2 or 4.0.3.CVE-2018-16600amazonamazon_web_services_freertos+1EPSS score1.83%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure.CVE-2018-16603amazonamazon_web_services_freertos+1EPSS score1.81%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an attacker.CVE-2018-16526amazonamazon_web_services_freertos+1EPSS score4.44%
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.CVE-2018-16528amazonamazon_web_services_freertosEPSS score3.29%
Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity modules.CVE-2018-16601amazonamazon_web_services_freertos+1EPSS score4.16%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly remote code execution.CVE-2018-16522amazonamazon_web_services_freertosEPSS score2.05%
Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.CVE-2018-16599amazonamazon_web_services_freertos+1EPSS score1.83%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of NBNS packets in prvTreatNBNS can be used for information disclosure.CVE-2018-16598amazonamazon_web_services_freertos+1EPSS score1.52%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.CVE-2018-16602amazonamazon_web_services_freertos+1EPSS score1.84%
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosure.CVE-2018-16524amazonamazon_web_services_freertos+1EPSS score1.83%
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions.CVE-2018-16523amazonamazon_web_services_freertos+1EPSS score2.05%
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.CVE-2018-16525amazonamazon_web_services_freertos+1EPSS score4.44%
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.CVE-2018-16527amazonamazon_web_services_freertos+1EPSS score1.85%
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket.CVE-2018-1169amazonamazon_music+1EPSS score2.51%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5521.CVE-2018-19186amazonpayfort-php-sdkEPSS score0.68%
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.CVE-2018-19190amazonpayfort-php-sdkEPSS score0.84%
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.CVE-2018-19189amazonpayfort-php-sdkEPSS score0.86%
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.CVE-2018-19981amazonaws_software_development_kitEPSS score1.80%
Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege access to the Android filesystem in order to exploit this vulnerability (i.e. the device has been compromised, such as disabling or bypassing Android's fundamental security mechanisms).CVE-2018-19188amazonpayfort-php-sdkEPSS score1.52%
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.