# Amazon vulnerabilities > Amazon has 152 published vulnerabilities across 111 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Freertos, with 17. If you run Amazon software, patch the exploited flaws first. Canonical page: https://www.edgeprotect.io/vendors/amazon ## At a glance - **Published vulnerabilities:** 152 - **Known to be exploited:** 2 - **Products:** 111 - **Versions:** 8,489 - **Most recently added to the known-exploited list:** [CVE-2026-31431](https://www.edgeprotect.io/what-is/cve-2026-31431), 1 May 2026. We keep watching the list. ## Which Amazon products have the most vulnerabilities? - [Freertos](https://www.edgeprotect.io/product/amazon/freertos): 17 published vulnerabilities, 133 versions - [Amazon Web Services Freertos](https://www.edgeprotect.io/product/amazon/amazon_web_services_freertos): 14 published vulnerabilities, 31 versions - [Fire OS](https://www.edgeprotect.io/product/amazon/fire_os): 13 published vulnerabilities, 15 versions - [Opensearch](https://www.edgeprotect.io/product/amazon/opensearch): 10 published vulnerabilities, 33 versions - [Blink Xt2 Sync Module Firmware](https://www.edgeprotect.io/product/amazon/blink_xt2_sync_module_firmware): 7 published vulnerabilities, 2 versions - [Tough](https://www.edgeprotect.io/product/amazon/tough): 7 published vulnerabilities, 31 versions - [Kindle Fire Hd](https://www.edgeprotect.io/product/amazon/kindle_fire_hd): 7 published vulnerabilities, 1 version - [Blink Xt2 Sync Module](https://www.edgeprotect.io/product/amazon/blink_xt2_sync_module): 7 published vulnerabilities, 0 versions - [Data.all](https://www.edgeprotect.io/product/amazon/data.all): 5 published vulnerabilities, 35 versions - [Payfort-PHP-SDK](https://www.edgeprotect.io/product/amazon/payfort-php-sdk): 5 published vulnerabilities, 1 version Each product page lists its own known-exploited flaws. ## Which Amazon vulnerabilities are being exploited? 2 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-31431](https://www.edgeprotect.io/what-is/cve-2026-31431): Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability. High, CVSS 7.8, chance of use in 30 days 98%, known exploited since 1 May 2026. - [CVE-2023-44487](https://www.edgeprotect.io/what-is/cve-2023-44487): HTTP/2 Rapid Reset Attack Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 October 2023. ## Which Amazon flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2023-44487](https://www.edgeprotect.io/what-is/cve-2023-44487): >99%, High (CVSS 7.5), known exploited - [CVE-2024-6387](https://www.edgeprotect.io/what-is/cve-2024-6387): >99%, High (CVSS 8.1) - [CVE-2026-31431](https://www.edgeprotect.io/what-is/cve-2026-31431): 98%, High (CVSS 7.8), known exploited - [CVE-2021-30354](https://www.edgeprotect.io/what-is/cve-2021-30354): 8.4%, High (CVSS 8.6) - [CVE-2021-38112](https://www.edgeprotect.io/what-is/cve-2021-38112): 7.5%, High (CVSS 8.8) - [CVE-2021-30355](https://www.edgeprotect.io/what-is/cve-2021-30355): 6.9%, High (CVSS 8.6) - [CVE-2018-16526](https://www.edgeprotect.io/what-is/cve-2018-16526): 4.4%, High (CVSS 8.1) - [CVE-2018-16525](https://www.edgeprotect.io/what-is/cve-2018-16525): 4.4%, High (CVSS 8.1) - [CVE-2018-16601](https://www.edgeprotect.io/what-is/cve-2018-16601): 4.2%, High (CVSS 8.1) - [CVE-2019-3984](https://www.edgeprotect.io/what-is/cve-2019-3984): 3.8%, Critical (CVSS 9.8) ## All Amazon products we track 72 products with at least one tracked version, most vulnerabilities first: - [Freertos](https://www.edgeprotect.io/product/amazon/freertos): 17 vulnerabilities, 133 versions - [Amazon Web Services Freertos](https://www.edgeprotect.io/product/amazon/amazon_web_services_freertos): 14 vulnerabilities, 31 versions - [Fire OS](https://www.edgeprotect.io/product/amazon/fire_os): 13 vulnerabilities, 15 versions - [Opensearch](https://www.edgeprotect.io/product/amazon/opensearch): 10 vulnerabilities, 33 versions - [Blink Xt2 Sync Module Firmware](https://www.edgeprotect.io/product/amazon/blink_xt2_sync_module_firmware): 7 vulnerabilities, 2 versions - [Tough](https://www.edgeprotect.io/product/amazon/tough): 7 vulnerabilities, 31 versions - [Kindle Fire Hd](https://www.edgeprotect.io/product/amazon/kindle_fire_hd): 7 vulnerabilities, 1 version - [Data.all](https://www.edgeprotect.io/product/amazon/data.all): 5 vulnerabilities, 35 versions - [Payfort-PHP-SDK](https://www.edgeprotect.io/product/amazon/payfort-php-sdk): 5 vulnerabilities, 1 version - [Echo Dot](https://www.edgeprotect.io/product/amazon/echo_dot): 4 vulnerabilities, 2 versions - [Freertos-Plus-Tcp](https://www.edgeprotect.io/product/amazon/freertos-plus-tcp): 4 vulnerabilities, 14 versions - [Aws Cloud Development Kit](https://www.edgeprotect.io/product/amazon/aws_cloud_development_kit): 4 vulnerabilities, 415 versions - [Aws Software Development Kit](https://www.edgeprotect.io/product/amazon/aws_software_development_kit): 4 vulnerabilities, 2,810 versions - [Firecracker](https://www.edgeprotect.io/product/amazon/firecracker): 3 vulnerabilities, 88 versions - [Amazon Web Services Aws-C-Io](https://www.edgeprotect.io/product/amazon/amazon_web_services_aws-c-io): 3 vulnerabilities, 2 versions - [Echo Dot Firmware](https://www.edgeprotect.io/product/amazon/echo_dot_firmware): 3 vulnerabilities, 2 versions - [Kindle](https://www.edgeprotect.io/product/amazon/kindle): 3 vulnerabilities, 4 versions - [Amazon Web Services Redshift Java Database Connectivity Driver](https://www.edgeprotect.io/product/amazon/amazon_web_services_redshift_java_database_connectivity_driver): 2 vulnerabilities, 40 versions - [Awslabs Sandbox Accounts for Events](https://www.edgeprotect.io/product/amazon/awslabs_sandbox_accounts_for_events): 2 vulnerabilities, 1 version - [Kindle Touch](https://www.edgeprotect.io/product/amazon/kindle_touch): 2 vulnerabilities, 2 versions - [Kindle for Pc](https://www.edgeprotect.io/product/amazon/kindle_for_pc): 2 vulnerabilities, 2 versions - [Opensearch Security](https://www.edgeprotect.io/product/amazon/opensearch_security): 2 vulnerabilities, 77 versions - [Workspaces](https://www.edgeprotect.io/product/amazon/workspaces): 2 vulnerabilities, 83 versions - [Aws Encryption SDK](https://www.edgeprotect.io/product/amazon/aws_encryption_sdk): 2 vulnerabilities, 27 versions - [Aws S3 Crypto SDK](https://www.edgeprotect.io/product/amazon/aws_s3_crypto_sdk): 2 vulnerabilities, 2 versions - [Amazon Linux](https://www.edgeprotect.io/product/amazon/amazon_linux): 2 vulnerabilities, 184 versions - [Aws Client VPN](https://www.edgeprotect.io/product/amazon/aws_client_vpn): 2 vulnerabilities, 1 version - [Audible](https://www.edgeprotect.io/product/amazon/audible): 2 vulnerabilities, 3 versions - [Amazon Cloudfront](https://www.edgeprotect.io/product/amazon/amazon_cloudfront): 1 vulnerability, 1 version - [Amazon Key Firmware](https://www.edgeprotect.io/product/amazon/amazon_key_firmware): 1 vulnerability, 1 version - [Amazon Music](https://www.edgeprotect.io/product/amazon/amazon_music): 1 vulnerability, 1 version - [Amazon Ssm Agent](https://www.edgeprotect.io/product/amazon/amazon_ssm_agent): 1 vulnerability, 134 versions - [Aws Deployment Framework](https://www.edgeprotect.io/product/amazon/aws_deployment_framework): 1 vulnerability, 12 versions - [Aws Javascript S3 Explorer](https://www.edgeprotect.io/product/amazon/aws_javascript_s3_explorer): 1 vulnerability, 2 versions - [Aws Lambda](https://www.edgeprotect.io/product/amazon/aws_lambda): 1 vulnerability, 23 versions - [Aws Opensearch](https://www.edgeprotect.io/product/amazon/aws_opensearch): 1 vulnerability, 4 versions - [Aws SDK for Javascipt](https://www.edgeprotect.io/product/amazon/aws_sdk_for_javascipt): 1 vulnerability, 1,106 versions - [Aws-SDK-Java](https://www.edgeprotect.io/product/amazon/aws-sdk-java): 1 vulnerability, 1,511 versions - [Aws Shared Configuration File Loader](https://www.edgeprotect.io/product/amazon/aws_shared_configuration_file_loader): 1 vulnerability, 20 versions - [Aws-Sigv4](https://www.edgeprotect.io/product/amazon/aws-sigv4): 1 vulnerability, 24 versions - Awsui/components-React: 1 vulnerability, 621 versions - [Cloudwatch Agent](https://www.edgeprotect.io/product/amazon/cloudwatch_agent): 1 vulnerability, 58 versions - [Echo Firmware](https://www.edgeprotect.io/product/amazon/echo_firmware): 1 vulnerability, 1 version - [Echo Plus Firmware](https://www.edgeprotect.io/product/amazon/echo_plus_firmware): 1 vulnerability, 1 version - [Echo Show Firmware](https://www.edgeprotect.io/product/amazon/echo_show_firmware): 1 vulnerability, 1 version - [Echo Spot Firmware](https://www.edgeprotect.io/product/amazon/echo_spot_firmware): 1 vulnerability, 1 version - [Efs-Utils](https://www.edgeprotect.io/product/amazon/efs-utils): 1 vulnerability, 44 versions - [Elastic File System Container Storage Interface Driver](https://www.edgeprotect.io/product/amazon/elastic_file_system_container_storage_interface_driver): 1 vulnerability, 25 versions - [Elastic Load Balancing](https://www.edgeprotect.io/product/amazon/elastic_load_balancing): 1 vulnerability, 9 versions - [Fhir-Works-on-Aws-Authz-Smart](https://www.edgeprotect.io/product/amazon/fhir-works-on-aws-authz-smart): 1 vulnerability, 18 versions - Freertos+fat: 1 vulnerability, 1 version - [Hotpatch](https://www.edgeprotect.io/product/amazon/hotpatch): 1 vulnerability, 2 versions - [Ion](https://www.edgeprotect.io/product/amazon/ion): 1 vulnerability, 32 versions - [Linux 2](https://www.edgeprotect.io/product/amazon/linux_2): 1 vulnerability, 5 versions - [Open Distro](https://www.edgeprotect.io/product/amazon/open_distro): 1 vulnerability, 22 versions - [Opensearch Data Prepper](https://www.edgeprotect.io/product/amazon/opensearch_data_prepper): 1 vulnerability, 25 versions - [Opensearch Notifications](https://www.edgeprotect.io/product/amazon/opensearch_notifications): 1 vulnerability, 6 versions - [Alexa](https://www.edgeprotect.io/product/amazon/alexa): 1 vulnerability, 1 version - [Ring Video Doorbell Firmware](https://www.edgeprotect.io/product/amazon/ring_video_doorbell_firmware): 1 vulnerability, 1 version - [Sockeye](https://www.edgeprotect.io/product/amazon/sockeye): 1 vulnerability, 225 versions - [Amazon Freertos](https://www.edgeprotect.io/product/amazon/amazon_freertos): 0 vulnerabilities, 23 versions - [Amazon Web Services Software Development Kit](https://www.edgeprotect.io/product/amazon/amazon_web_services_software_development_kit): 0 vulnerabilities, 128 versions - [Payfort](https://www.edgeprotect.io/product/amazon/payfort): 0 vulnerabilities, 1 version - [Elastic Load Balancing API Tools](https://www.edgeprotect.io/product/amazon/elastic_load_balancing_api_tools): 0 vulnerabilities, 9 versions - [Redshift Odbc Driver](https://www.edgeprotect.io/product/amazon/redshift_odbc_driver): 0 vulnerabilities, 23 versions - [Corretto](https://www.edgeprotect.io/product/amazon/corretto): 0 vulnerabilities, 2 versions - [Aws Libcrypto](https://www.edgeprotect.io/product/amazon/aws_libcrypto): 0 vulnerabilities, 136 versions - [Aws-Lc-Sys](https://www.edgeprotect.io/product/amazon/aws-lc-sys): 0 vulnerabilities, 63 versions - [Aws-Lc-Rs](https://www.edgeprotect.io/product/amazon/aws-lc-rs): 0 vulnerabilities, 46 versions - [Aws-Lc-Fips-Sys](https://www.edgeprotect.io/product/amazon/aws-lc-fips-sys): 0 vulnerabilities, 46 versions - [Harmonix](https://www.edgeprotect.io/product/amazon/harmonix): 0 vulnerabilities, 10 versions - [Aws-Lambda](https://www.edgeprotect.io/product/amazon/aws-lambda): 0 vulnerabilities, 23 versions ## Questions ### How many vulnerabilities does Amazon have? Our catalogue lists 152 published vulnerabilities across 111 products and 8,489 versions from Amazon. The most recent Amazon flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026. ### Which Amazon vulnerabilities are being exploited? 2 Amazon vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-31431 and CVE-2023-44487. The full list is on this page. ### Which Amazon product has the most vulnerabilities? Freertos, with 17 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Amazon vulnerabilities? Create a EdgeProtect account and track the Amazon products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Amazon? EdgeProtect keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.edgeprotect.io/register Book a demo: https://www.edgeprotect.io/contact