Every CVE whose affected-product data names Amazon Aws-lc-sys, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2026-3336 — CVSS 7.5 (high): Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when…
CVE-2026-3338 — CVSS 7.5 (high): Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing…
CVE-2026-3337 — CVSS 5.9 (medium): Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag…