目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

aws 厂商漏洞列表 / CVE 中文分析 151

aws 厂商相关 151 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

AWS 提供广泛的云计算服务，涵盖计算、存储及数据库等领域。其历史漏洞多涉及远程代码执行、权限绕过及信息泄露，部分源于配置错误或组件缺陷。值得关注的是，AWS 持续强化身份与访问管理（IAM）及加密机制，并定期发布安全最佳实践。尽管漏洞数量达 68 条，但其通过自动化补丁和合规认证（如 ISO 27001）维持较高安全基线，企业需重点关注配置合规性以防范风险。

Top products by aws: tough FreeRTOS-Plus-TCP Kiro IDE AWS-LC Research and Engineering Studio (RES) loom aws-cdk sagemaker-python-sdk Amazon OpenSearch Service Opensearch AWS Advanced JDBC Wrapper AWS Ops Wheel bedrock-agentcore bedrock-agentcore-starter-toolkit projen aws-efs-csi-driver aws-sdk-cpp strands-agents-tools s2n-quic SageMaker Python SDK Firecracker AWS Serverless Application Model Command Line Interface Client VPN AWS Sign-in IAM Login Flow aws-sdk-php aws-transform-mcp-server documentdb-mcp-server DeepJavaLibrary Athena Federated Query Clickhouse Connector deployment template Athena Federated Query Neptune Connector
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-83551 Amazon SageMaker Python SDK 加密问题漏洞 — sagemaker-python-sdk CWE-312 7.2 High 2026-09-01
CVE-2026-81838 Amazon Diagram-as-code 路径遍历漏洞 — diagram-as-code CWE-23 7.1 High 2026-08-27
CVE-2026-77811 OpenSearch Observability 跨站脚本漏洞 — Amazon OpenSearch Service CWE-79 8.7 High 2026-08-21
CVE-2026-77810 Amazon Athena Federated Query Neptune Connector 代码注入漏洞 — Athena Federated Query Neptune Connector CWE-95 9.9 Critical 2026-08-21
CVE-2026-18420 OpenSearch Dashboards 输入验证错误漏洞 — Amazon OpenSearch Service CWE-1321 8.8 High 2026-08-20
CVE-2026-75910 Amazon Athena Query Federation 权限许可和访问控制问题漏洞 — Athena Federated Query Clickhouse Connector deployment template CWE-266 6.5 Medium 2026-08-20
CVE-2026-18428 OpenSearch Direct Query SQL查询验证绕过漏洞 — Opensearch CWE-693 8.8 High 2026-08-13
CVE-2026-19643 Amazon AWS SDK for C++ 缓冲区错误漏洞 — aws-sdk-cpp CWE-125 5.3 Medium 2026-08-12
CVE-2026-19642 Amazon AWS SDK for C++ 缓冲区错误漏洞 — aws-sdk-cpp CWE-787 5.9 Medium 2026-08-12
CVE-2026-18952 OpenSearch Security Analytics plugin 服务端请求伪造漏洞 — Opensearch CWE-918 8.1 High 2026-08-12
CVE-2026-19311 OpenSearch Alerting 处理逻辑错误漏洞 — OpenSearch CWE-475 8.1 High 2026-08-12
CVE-2026-19111 AWS strands-agents-tools 授权问题漏洞 — strands-agents-tools CWE-639 8.1 High 2026-08-06
CVE-2026-18954 Amazon Open source MCP servers for AWS 授权问题漏洞 — documentdb-mcp-server CWE-863 5.5 Medium 2026-08-05
CVE-2026-18953 Amazon Open source MCP servers for AWS 路径遍历漏洞 — aws-transform-mcp-server CWE-22 8.6 High 2026-08-05
CVE-2026-18830 Amazon Bedrock AgentCore harness InvokeHarness API 软件供应链问题漏洞 — Amazon Bedrock AgentCore harness CWE-1287 8.1 High 2026-08-04
CVE-2026-18733 Amazon Strands Agents Tools 提示词注入漏洞 — strands-agents-tools CWE-1427 8.8 High 2026-08-03
CVE-2026-18654 Amazon aws-cli 加密问题漏洞 — aws-cli CWE-322 6.8 Medium 2026-08-03
CVE-2026-18655 Amazon Open source MCP servers for AWS 授权问题漏洞 — amazon-mq-mcp-server CWE-923 6.5 Medium 2026-08-03
CVE-2026-18394 Amazon Strands Agents Tools 授权问题漏洞 — Strands Agents Tools CWE-863 7.4 High 2026-07-31
CVE-2026-18481 Amazon Ops Wheel 跨站脚本漏洞 — AWS Ops Wheel CWE-79 7.3 High 2026-07-31
CVE-2026-18140 AWS aws-smithy-json 资源管理错误漏洞 — aws-smithy-json CWE-674 7.5 High 2026-07-30
CVE-2026-18245 AWS Amplify Codegen UI 代码注入漏洞 — Amplify Codegen UI CWE-94 9.0 Critical 2026-07-30
CVE-2026-16796 Amazon Bedrock AgentCore SDK 命令注入漏洞 — bedrock-agentcore 1.18.1 CWE-88 7.3 High 2026-07-23
CVE-2026-16756 smithy-lang Smithy Rust 资源管理错误漏洞 — aws-smithy-http-server CWE-770 7.5 High 2026-07-23
CVE-2026-16584 Amazon Open source MCP servers for AWS 异常处理不当漏洞 — aws-api-mcp-server CWE-455 7.0 High 2026-07-23
CVE-2026-16317 Amazon s2n-tls 加密问题漏洞 — s2n-tls CWE-354 6.5 Medium 2026-07-21
CVE-2026-15957 aws-sdk-rust 资源管理错误漏洞 — aws-sdk-rust CWE-770 7.5 High 2026-07-21
CVE-2026-15415 AWS aws-healthomics-mcp-server 路径遍历漏洞 — aws-healthomics-mcp-server CWE-23 5.5 Medium 2026-07-17
CVE-2026-12283 AWS Amazon Athena Query Federation SQL注入漏洞 — aws-athena-query-federation CWE-89 6.8 Medium 2026-07-17
CVE-2026-15737 Amazon Bedrock AgentCore SDK 日志信息泄露漏洞 — bedrock-agentcore CWE-532 5.7 Medium 2026-07-16

本页汇总了 aws 厂商截至目前公开的全部 151 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。