Everything Patch Gazette has reported about AWS: 3 stories, newest first. Part of our Vulnerabilities coverage.
Two out-of-bounds issues in the IPv6 Router Advertisement parser affect versions up to 4.4.0. Patches are available for immediate deployment.
Versions prior to 1.82.0 allow attackers to exhaust server memory via crafted QUIC packets without authentication.
AWS released version 2026.06 to fix CVE-2026-14904, which lets authenticated users read root files via symbolic links in the Auth API.