Amazon vulnerabilities2 known to be exploited.
Amazon has 152 published vulnerabilities across 111 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Freertos, with 17. If you run Amazon software, patch the exploited flaws first.
The most recent Amazon flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026. We keep watching the known-exploited list.
Which Amazon products have the most vulnerabilities?
Freertos leads with 17 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Amazon vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- 7.5HTTP/2 Rapid Reset Attack Vulnerability
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
Which Amazon flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- >99%CVE-2024-6387High
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
- 98%
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
- 8.4%CVE-2021-30354High
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to...
- 7.5%CVE-2021-38112High
In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF)...
- 6.9%CVE-2021-30355High
Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.
- 4.4%CVE-2018-16526High
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary...
- 4.4%CVE-2018-16525High
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak...
- 4.2%CVE-2018-16601High
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component.
- 3.8%CVE-2019-3984Critical
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.
All Amazon products we track.
72 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Freertosfreertos17 vulnerabilities133 versions
- Amazon Web Services Freertosamazon_web_services_freertos14 vulnerabilities31 versions
- Fire OSfire_os13 vulnerabilities15 versions
- Opensearchopensearch10 vulnerabilities33 versions
- Blink Xt2 Sync Module Firmwareblink_xt2_sync_module_firmware7 vulnerabilities2 versions
- Kindle Fire Hdkindle_fire_hd7 vulnerabilities1 version
- Toughtough7 vulnerabilities31 versions
- Data.alldata.all5 vulnerabilities35 versions
- Payfort-PHP-SDKpayfort-php-sdk5 vulnerabilities1 version
- Aws Cloud Development Kitaws_cloud_development_kit4 vulnerabilities415 versions
- Aws Software Development Kitaws_software_development_kit4 vulnerabilities2,810 versions
- Echo Dotecho_dot4 vulnerabilities2 versions
- Freertos-Plus-Tcpfreertos-plus-tcp4 vulnerabilities14 versions
- Amazon Web Services Aws-C-Ioamazon_web_services_aws-c-io3 vulnerabilities2 versions
- Echo Dot Firmwareecho_dot_firmware3 vulnerabilities2 versions
- Firecrackerfirecracker3 vulnerabilities88 versions
- Kindlekindle3 vulnerabilities4 versions
- Amazon Linuxamazon_linux2 vulnerabilities184 versions
- Amazon Web Services Redshift Java Database Connectivity Driveramazon_web_services_redshift_java_database_connectivity_driver2 vulnerabilities40 versions
- Audibleaudible2 vulnerabilities3 versions
- Aws Client VPNaws_client_vpn2 vulnerabilities1 version
- Aws Encryption SDKaws_encryption_sdk2 vulnerabilities27 versions
- Aws S3 Crypto SDKaws_s3_crypto_sdk2 vulnerabilities2 versions
- Awslabs Sandbox Accounts for Eventsawslabs_sandbox_accounts_for_events2 vulnerabilities1 version
This directory lists the 72 Amazon products with at least one tracked version, of 111 in our catalogue.
Running Amazon? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- Matched to
- Ion on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 152 published vulnerabilities across 111 products and 8,489 versions from Amazon. The most recent Amazon flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026.
2 Amazon vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-31431 and CVE-2023-44487. The full list is on this page.
Freertos, with 17 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Amazon products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.