Skip to content
OpenAdvisories

Product · amazon

log4j-cve-2021-44228-hotpatch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-85656

    OS command injection in Amazon log4j-cve-2021-44228-hotpatch

    An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.

    amazon log4j-cve-2021-44228-hotpatch