Amazon Linux 2

productDE

cpe:/o:amazon:linux_2:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

465critical3591high7835medium182low

updated 2026-10-27

vulnerabilities (20,555)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2026-109618US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2026-10-21	—
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	—
CVE-2026-109619US	high8.1OT critical	100.0% (100th)	KEV	no fix	2026-10-21	—
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	no fix	2021-01-26	—
CVE-2024-38475US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-07-01	—
CVE-2022-46169US	critical9.8OT critical	99.8% (100th)	KEV	no fix	2022-12-05	—
CVE-2025-31324US	critical9.8OT critical	99.5% (100th)	KEV	no fix	2025-04-24	≤ vers:unknown/unknown
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	no fix	2023-07-11	—
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	—
CVE-2026-34486US	—OT critical	98.5% (100th)	KEV	no fix	2026-04-09	—
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	—
CVE-2020-17530US	critical9.8OT critical	96.3% (100th)	KEV	no fix	2020-12-11	—
CVE-2022-0847US	high7.8OT critical	92.8% (100th)	KEV	no fix	2022-03-10	—
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	no fix	2025-06-30	—
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	no fix	2023-07-11	—
CVE-2024-1086US	high7.8OT critical	28.1% (98th)	KEV	no fix	2024-01-31	—
CVE-2023-28205US	high8.8OT critical	27.1% (98th)	KEV	no fix	2023-04-10	—
CVE-2022-0185US	high8.4OT critical	25.2% (98th)	KEV	no fix	2022-02-11	—
CVE-2024-9680US	critical9.8OT critical	23.2% (98th)	KEV	no fix	2024-10-09	—
CVE-2023-7101US	high7.8OT critical	19.0% (97th)	KEV	no fix	2023-12-24	—
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	no fix	2019-12-18	—
CVE-2025-6558US	—OT critical	10.9% (96th)	KEV	no fix	2025-07-15	—
CVE-2022-2586US	high7.8OT critical	10.2% (96th)	KEV	no fix	2024-01-08	—
CVE-2024-44308US	high8.8OT critical	10.2% (96th)	KEV	no fix	2024-11-20	—
CVE-2022-0995US	high7.8OT critical	8.86% (95th)	KEV	no fix	2022-03-25	—
CVE-2022-0492US	high7.8OT critical	5.53% (93rd)	KEV	no fix	2022-03-03	—
CVE-2025-48384US	—OT critical	4.38% (91st)	KEV	no fix	2025-07-08	—
CVE-2023-0266US	high7.0OT critical	3.67% (90th)	KEV	no fix	2023-01-30	—
CVE-2024-53104US	high7.8OT critical	3.40% (89th)	KEV	no fix	2024-12-02	—
CVE-2025-39682US	critical9.8OT critical	3.25% (88th)	KEV	no fix	2025-09-05	—
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	no fix	2024-06-10	—
CVE-2026-3909US	high8.8OT critical	2.34% (84th)	KEV	no fix	2026-03-13	—
CVE-2025-31277US	—OT critical	1.66% (77th)	KEV	no fix	2025-07-30	—
CVE-2025-39964US	medium5.5OT critical	1.57% (75th)	KEV	no fix	2025-10-13	—
CVE-2025-38352US	—OT critical	1.36% (72nd)	KEV	no fix	2025-07-22	—
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	no fix	2026-06-25	—
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	no fix	2026-07-04	—
CVE-2023-5217US	high8.8OT critical	49.0% (99th)	KEV	no fix	2023-09-28	—
CVE-2024-44309US	medium6.3OT critical	22.6% (98th)	KEV	no fix	2024-11-20	—
CVE-2023-35311US	—OT critical	15.5% (97th)	KEV	no fix	2023-07-11	—
CVE-2023-32046US	—OT critical	9.97% (96th)	KEV	no fix	2023-07-11	—
CVE-2023-32049US	—OT critical	4.16% (91st)	KEV	no fix	2023-07-11	—
CVE-2024-53197US	—OT critical	4.12% (91st)	KEV	no fix	2024-12-27	—
CVE-2023-43000US	high8.8OT critical	4.04% (91st)	KEV	no fix	2025-11-05	—
CVE-2019-8720US	high8.8OT critical	1.56% (75th)	KEV	no fix	2023-03-06	—
CVE-2021-1048US	high7.8OT critical	1.06% (64th)	KEV	no fix	2021-12-15	—
CVE-2021-0920US	medium6.4OT critical	0.87% (59th)	KEV	no fix	2021-12-15	—
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	no fix	2024-11-19	—
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	—

showing 50 of 20,555

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference2,929 CVEs
CWE-416Use After Free2,831 CVEs
CWE-20Improper Input Validation2,041 CVEs
CWE-125Out-of-bounds Read1,605 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1,563 CVEs
CWE-787Out-of-bounds Write1,396 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1,100 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')941 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)20,533 CVEs
NLNCSC-NL (CSAF)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan