Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV
TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records
Freertos 21 records MEDIUM Amazon Web Services Freertos 14 records MEDIUM Fire Os 13 records MEDIUM Opensearch 11 records HIGH Tough 10 records MEDIUM Freertos-plus-tcp 9 records MEDIUM Blink Xt2 Sync Module Firmware 7 records MEDIUM Athena Odbc 6 records MEDIUM

Records

14 records in Amazon Web Services Freertos · all components

TI-2018-11856 CVE-2018-16526 · GHSA-x25v-p526-wx8v

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
TI-2018-11855 CVE-2018-16525 · GHSA-p44f-9m6f-62jr

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
TI-2018-11858 CVE-2018-16528 · GHSA-x364-mjf7-297c

Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute…

Priority MEDIUM 41

Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03291 Published 2018-12-06 No fix listed CWE-20
TI-2019-09825 CVE-2019-13120 · GHSA-vvg7-3vpg-wq97

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in…

Priority LOW 35

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0119 Published 2019-10-07 No fix listed CWE-125
TI-2018-11857 CVE-2018-16527 · GHSA-r4r9-268q-qj6x

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvPro…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.0185 Published 2018-12-06 No fix listed CWE-200
TI-2018-11854 CVE-2018-16524 · GHSA-6hm7-35p7-wmmp

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvChec…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01829 Published 2018-12-06 No fix listed CWE-200
Open these records in search →