How many amazon aws software development kit CVEs are in CISA KEV?

None of amazon aws software development kit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of amazon aws software development kit are affected?

9 distinct amazon aws software development kit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in amazon aws software development kit CVEs?

amazon aws software development kit's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-312 (Cleartext Storage of Sensitive Information), CWE-326 (Inadequate Encryption Strength).

How many critical amazon aws software development kit vulnerabilities are there?

amazon aws software development kit has 1 critical and 1 high-severity CVEs.

What is the average severity of amazon aws software development kit CVEs?

The average CVSS base score across amazon aws software development kit's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

amazon

6 CVEs

amazon aws software development kit Vulnerabilities

Name: amazon aws software development kit vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for aws software development kit by amazon.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.5

Avg CVSS

2019–2026

Last updated August 12, 2026

Overview

amazon aws software development kit has 6 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting amazon aws software development kit, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of amazon aws software development kit's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of amazon aws software development kit's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of amazon aws software development kit's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every amazon aws software development kit version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.11.8622 CVEs
< 1.34.01 CVE
< 2.59.11 CVE
< 3.288.11 CVE
<= 2.8.51 CVE

Fixed in

1.11.8622 CVEs
1.34.01 CVE
2.59.11 CVE
3.288.11 CVE

Find a version

6 CVEs

Sort

Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms
CVE-2026-19643
Patch
CWE-125
Medium · CVSS 6.0
EPSS 0.3% (27th pct)2026-08-12
Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp
CVE-2026-19642
Patch
CWE-787
Medium · CVSS 6.0
EPSS 0.3% (23th pct)2026-08-12
Potential URI resolution path traversal in the AWS SDK for PHP
CVE-2023-51651
Patch
CWE-22
Medium · CVSS 6.0
EPSS 0.4% (32th pct)2023-12-22
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
CVE-2022-2582
Public exploit
Patch
CWE-326
Medium · CVSS 4.3
EPSS 0.5% (41th pct)2022-12-27
AWS SDK is vulnerable to server-side request forgery (SSRF)
CVE-2022-4725
Patch
Workaround
CWE-918
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2022-12-24
High vulnerability · 2019-04-04
CVE-2018-19981
Public exploit
CWE-312
High · CVSS 7.2
EPSS 1.8% (77th pct)2019-04-04

Common weakness types

The CWE weakness categories most often found in amazon aws software development kit CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many amazon aws software development kit CVEs were published each year.

2019

1

2022

2

2023

1

2026

2

Other amazon products

Browse vulnerabilities for other products by amazon.

freertos22 CVEs amazon web services freertos14 CVEs fire os13 CVEs opensearch11 CVEs freertos-plus-tcp10 CVEs tough10 CVEs blink xt2 sync module7 CVEs blink xt2 sync module firmware7 CVEs

All amazon vulnerabilities

Frequently asked questions

Common questions about amazon aws software development kit vulnerabilities.

How many CVEs does amazon aws software development kit have?: amazon aws software development kit has 6 published CVE records since 2019.
How many amazon aws software development kit CVEs are in CISA KEV?: None of amazon aws software development kit's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for amazon aws software development kit vulnerabilities?: Yes — 2 of amazon aws software development kit's CVEs have a known public exploit.
Which versions of amazon aws software development kit are affected?: 9 distinct amazon aws software development kit versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in amazon aws software development kit CVEs?: amazon aws software development kit's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-312 (Cleartext Storage of Sensitive Information), CWE-326 (Inadequate Encryption Strength).
How many critical amazon aws software development kit vulnerabilities are there?: amazon aws software development kit has 1 critical and 1 high-severity CVEs.
What is the average severity of amazon aws software development kit CVEs?: The average CVSS base score across amazon aws software development kit's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track amazon aws software development kit vulnerabilities

Monitor new amazon aws software development kit vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing