AWS Security Advisories · May 2025 — AWS Security Advisories
7 advisories 16 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2025-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2025-1976

ALAS · AL1ExploitedCISA KEV listedImportant2025-05-12

ALAS-2025-1976: freetype (important)

CVEs:CVE-2025-27363

Affected products

ProductStatusVendorPackageEcosystem
freetype affected Amazon freetype —
Upstream advisory

AWS-2025-011

AWS BulletinActive exploitation (sightings)2025-05-27

CVE-2025-5279 - Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

CVEs:CVE-2025-5279

Upstream advisory

ALAS-2025-1980

ALAS · AL1Active exploitation (sightings)Important2025-05-27

ALAS-2025-1980: ppp (important)

CVEs:CVE-2024-58250

Affected products

ProductStatusVendorPackageEcosystem
ppp affected Amazon ppp —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.