Latest Bulletins aws.amazon.com

Issues with AWS Research and Engineering Studio (RES)

aws.amazon.com·5w

Issues with Amazon Athena ODBC Driver

aws.amazon.com·5w

CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme

aws.amazon.com·5w

CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflow

aws.amazon.com·5w

CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

aws.amazon.com·8w

Arbitrary code execution via crafted project files in Kiro IDE

aws.amazon.com·9w

CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

aws.amazon.com·9w

CVE-2026-4270 - AWS API MCP File Access Restriction Bypass

aws.amazon.com·9w

MariaDB Server Audit Plugin Comment Handling Bypass

aws.amazon.com·11w

Issue with AWS-LC: an open-source, general-purpose cryptographic library (CVE-2026-3336, CVE-2026-3337, CVE-2026-3338)

aws.amazon.com·11w

Security Findings in SageMaker Python SDK

aws.amazon.com·15w

CVE-2026-1386 - Arbitrary Host File Overwrite via Symlink in Firecracker Jailer

aws.amazon.com·16w

Unanchored ACCOUNT_ID webhook filters for CodeBuild

aws.amazon.com·18w

CVE-2026-0830 - Command Injection in Kiro GitLab Merge Request Helper

aws.amazon.com·18w

Key Commitment Issues in S3 Encryption Clients

aws.amazon.com·22w

Key Commitment Issues in S3 Encryption Clients

aws.amazon.com·22w

Overly Permissive Trust Policy in Harmonix on AWS EKS

aws.amazon.com·22w

CVE-2025-66478: RCE in React Server Components

aws.amazon.com·24w

Call audio termination issue in AWS Wickr desktop clients

aws.amazon.com·25w

Privilege Escalation in Aurora PostgreSQL using AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Python Wrapper, AWS PGSQL ODBC driver

aws.amazon.com·27w

Log in to enable infinite scrolling