Skip to content
OpenAdvisories

Vendor

amazon

62 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.8
    CVE-2026-7791 Public exploit

    Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

    Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing fil…

  • Medium 4.3
    CVE-2026-3494 Public exploit

    MariaDB Server Audit Plugin Comment Handling Bypass

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

  • High 7.5
    CVE-2025-5688 Public exploit

    Out of Bounds Write in FreeRTOS-Plus-TCP

    We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the la…