Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV
TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records
Freertos 21 records MEDIUM Amazon Web Services Freertos 14 records MEDIUM Fire Os 13 records MEDIUM Opensearch 11 records HIGH Tough 10 records MEDIUM Freertos-plus-tcp 9 records MEDIUM Blink Xt2 Sync Module Firmware 7 records MEDIUM Athena Odbc 6 records MEDIUM

Records

6 records in Athena Odbc · all components

TI-2026-27669 CVE-2026-35562 · GHSA-8867-x23v-j894

Allocation of resources without limits in parsing components in Amazon Athena ODBC driver

Priority MEDIUM 44

Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive res…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00386 Published 2026-04-03 Fixed in 2.1.0.0 CWE-770
TI-2026-27668 CVE-2026-35561 · GHSA-f5vm-7v68-f9ff

Insufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver

Priority MEDIUM 42

Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to in…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00509 Published 2026-04-03 Fixed in 2.1.0.0 CWE-862
TI-2026-27667 CVE-2026-35560 · GHSA-x5c7-h5cc-rhvj

Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver

Priority MEDIUM 41

Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insuf…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0028 Published 2026-04-03 Fixed in 2.1.0.0 CWE-295
TI-2026-04804 CVE-2026-5485 · GHSA-hc25-p37h-5hmf

OS command injection in Amazon Athena ODBC driver on Linux

Priority LOW 36

OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameter…

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00917 Published 2026-04-03 Fixed in 2.0.5.1 CWE-78
TI-2026-27665 CVE-2026-35558 · GHSA-mc5r-mwqc-w2v3

Improper neutralization of special elements in authentication components in Amazon Athena ODBC driver

Priority LOW 34

Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using spec…

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00279 Published 2026-04-03 Fixed in 2.1.0.0 CWE-77
TI-2026-27666 CVE-2026-35559 · GHSA-2qgc-55qq-3w8v

Out-of-bounds write in query processing components in Amazon Athena ODBC driver

Priority LOW 31

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during que…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00281 Published 2026-04-03 Fixed in 2.1.0.0 CWE-787
Open these records in search →