Vendor advisories

AWS Security Bulletins

Browse 152 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 minutes ago Checked every 15 minutes

152 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
AWS Security BulletinsCVE-2026-12043
Severity not listed

CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http

Open the original vendor bulletin for the full description and affected-version details.

Vendor guidance

We identified CVE-2026-12043, an issue where improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote actor operating a server to cause memory corruption ...

AWS Security BulletinsCVE-2026-31431
Severity not listed

CVE-2026-31431

Open the original vendor bulletin for the full description and affected-version details.

Vendor guidance

As a best practice, AWS recommends that you apply all security patches and software version updates as soon as they become available.

AWS Security Bulletins
Severity not listed

Issues with Amazon Athena ODBC Driver

Open the original vendor bulletin for the full description and affected-version details.

Vendor guidance

We identified the following: - CVE-2026-5485: OS command injection in browser-based authentication component (Linux only, fixed in 2.0.5.1) - CVE-2026-35558: Improper neutralization of special elements in authenticati...

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources