Vulnerability Reportamazoncorretto:27.0.0-al2023

amazoncorretto:27.0.0-al2023amazoncorretto:27.0.0
digestsha256:0e4efd9e1cea5ff517e97e23c526a626fbf57ca272d12ff26c6b8e402832f9f3

Executive Summary

Last scanned:

Threat Score
67/100CAUTION
Reputation
TRUSTED

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. If an application built on this image decodes untrusted brotli data, an attacker could corrupt memory to run code or crash the service. Note: CVE-2026-111497 only applies if an application in the image decodes untrusted brotli data, and CVE-2026-76957 only applies if untrusted XML with custom encodings is parsed. The openssl findings, such as CVE-2026-14457, are denial-of-service issues that depend on non-default configurations, and the image does not expose ports or run a service by default. The vulnerabilities still exist in the image and should be assessed against the specific workloads that will be built on top of it. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Relevant for amazoncorretto:27.0.0-al2023

How to fix CVEs in runtime Docker images

Only a handful of these findings are real. Five steps that cut the count — and VEX for the rest.

Read the article

Vulnerabilities

Vulnerability Log

292 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-111497HIGH7.45
libbrotli
1.0.9-4.amzn2023.0.2
fixed in 1.1.0-1.amzn2023.0.2
36.0%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-76957MEDIUM6.24
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-14457MEDIUM6
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-18798MEDIUM6
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.7%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-54874MEDIUM6
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63072MEDIUM6
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63075MEDIUM6
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-14457MEDIUM6
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-18798MEDIUM6
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.7%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-54874MEDIUM6
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63072MEDIUM6
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-63075MEDIUM6
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54872MEDIUM5.9
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63073MEDIUM5.9
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-72897MEDIUM5.9
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.9
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.9
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63073MEDIUM5.9
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-72897MEDIUM5.9
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.9
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-56404MEDIUM5.52
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56405MEDIUM5.52
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56408MEDIUM5.52
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56410MEDIUM5.52
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56411MEDIUM5.52
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-74860MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-86138MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-86140MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-86142MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-86143MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-86144MEDIUM5.52
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42772MEDIUM5.3
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54873MEDIUM5.3
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75804MEDIUM5.3
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM5.3
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-84784MEDIUM5.3
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42772MEDIUM5.3
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54873MEDIUM5.3
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75804MEDIUM5.3
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM5.3
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-84784MEDIUM5.3
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-56409MEDIUM5.2
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-88807MEDIUM4.98
libXrender
0.9.11-6.amzn2023.0.1
fixed in 0.9.11-6.amzn2023.0.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-86145MEDIUM4.92
pcre2
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-86145MEDIUM4.92
pcre2-syntax
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-86137MEDIUM4.88
libxml2
2.10.4-1.amzn2023.0.20
fixed in 2.10.4-1.amzn2023.0.21
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50219MEDIUM4.72
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56412MEDIUM4.72
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-89161MEDIUM4.68
pcre2
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-89161MEDIUM4.68
pcre2-syntax
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-103111MEDIUM4.56
pcre2
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-103111MEDIUM4.56
pcre2-syntax
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-66046MEDIUM4.5
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-88806MEDIUM4.5
libX11
1.8.10-2.amzn2023.0.1
fixed in 1.8.10-2.amzn2023.0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-88806MEDIUM4.5
libX11-common
1.8.10-2.amzn2023.0.1
fixed in 1.8.10-2.amzn2023.0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM4.5
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63076MEDIUM4.5
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-63074MEDIUM4.5
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63076MEDIUM4.5
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-84782MEDIUM4.44
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM4.44
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-19553MEDIUM4.44
python3-libs
3.9.25-1.amzn2023.0.9
fixed in 3.9.25-1.amzn2023.0.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-94286MEDIUM4.26
libXtst
1.2.5-1.amzn2023.0.1
fixed in 1.2.5-1.amzn2023.0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78367MEDIUM4.2
python3-rpm
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84233MEDIUM4.2
python3-rpm
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78367MEDIUM4.2
rpm-build-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84233MEDIUM4.2
rpm-build-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78367MEDIUM4.2
rpm-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84233MEDIUM4.2
rpm-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78367MEDIUM4.2
rpm-sign-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84233MEDIUM4.2
rpm-sign-libs
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-113470MEDIUM4.14
ca-certificates
2025.2.76-1.0.amzn2023.0.3
fixed in 2025.2.76-1.0.amzn2023.0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-8927MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-8932MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9079MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-9080MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9545MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9547MEDIUM4.14
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-113470MEDIUM4.14
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-113470MEDIUM4.14
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-113470MEDIUM4.14
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-113470MEDIUM4.14
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-8927MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-8932MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9079MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-9080MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9545MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9547MEDIUM4.14
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91403MEDIUM4.08
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91403MEDIUM4.08
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91403MEDIUM4.08
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91403MEDIUM4.08
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11856LOW3.9
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-8924LOW3.9
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-91382LOW3.9
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91395LOW3.9
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91396LOW3.9
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91411LOW3.9
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91382LOW3.9
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91395LOW3.9
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91396LOW3.9
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91411LOW3.9
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91382LOW3.9
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91395LOW3.9
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91396LOW3.9
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91411LOW3.9
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91382LOW3.9
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91395LOW3.9
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91396LOW3.9
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91411LOW3.9
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11856LOW3.9
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-8924LOW3.9
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-89160LOW3.9
pcre2
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89160LOW3.9
pcre2-syntax
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.7
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35191LOW3.7
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
openssl-fips-provider-latest
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.7
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35191LOW3.7
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.3
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
openssl-libs
1:3.5.7-2.amzn2023.0.2
fixed in 1:3.5.8-1.amzn2023.0.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-56131LOW3.6
expat
2.6.3-1.amzn2023.0.6
fixed in 2.8.3-1.amzn2023.0.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-83374LOW3.54
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83387LOW3.54
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91394LOW3.54
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91462LOW3.54
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83374LOW3.54
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83387LOW3.54
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91394LOW3.54
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91462LOW3.54
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83374LOW3.54
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83387LOW3.54
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91394LOW3.54
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91462LOW3.54
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83374LOW3.54
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83387LOW3.54
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91394LOW3.54
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91462LOW3.54
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89156LOW3.54
pcre2
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89156LOW3.54
pcre2-syntax
10.40-1.amzn2023.0.3
fixed in 10.40-1.amzn2023.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87293LOW3.24
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87293LOW3.24
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87293LOW3.24
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87293LOW3.24
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83380LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87291LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91332LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91373LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91410LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91418LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91451LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91452LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91453LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91463LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91464LOW3.18
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83380LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87291LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91332LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91373LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91410LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91418LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91451LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91452LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91453LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91463LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91464LOW3.18
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83380LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87291LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91332LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91373LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91410LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91418LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91451LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91452LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91453LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91463LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91464LOW3.18
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83380LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87291LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91332LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91373LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91410LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91418LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91451LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91452LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91453LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91463LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91464LOW3.18
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-92392LOW2.92
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.3
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-92392LOW2.92
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.3
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-8926LOW2.88
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-83381LOW2.88
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91374LOW2.88
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91415LOW2.88
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91487LOW2.88
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83381LOW2.88
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91374LOW2.88
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91415LOW2.88
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91487LOW2.88
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83381LOW2.88
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91374LOW2.88
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91415LOW2.88
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91487LOW2.88
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83381LOW2.88
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91374LOW2.88
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91415LOW2.88
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91487LOW2.88
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-8926LOW2.88
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-10536LOW2.82
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-91375LOW2.82
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91379LOW2.82
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91375LOW2.82
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91379LOW2.82
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91375LOW2.82
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91379LOW2.82
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91375LOW2.82
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91379LOW2.82
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-10536LOW2.82
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-78659LOW2.7
libcap
2.73-1.amzn2023.0.7
fixed in 2.73-1.amzn2023.0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-78667LOW2.7
libcap
2.73-1.amzn2023.0.7
fixed in 2.73-1.amzn2023.0.8
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-94440LOW2.7
libcap
2.73-1.amzn2023.0.7
fixed in 2.73-1.amzn2023.0.8
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-97689LOW2.7
python3-pip-wheel
21.3.1-2.amzn2023.0.21
fixed in 21.3.1-2.amzn2023.0.22
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-19553LOW2.66
python3
3.9.25-1.amzn2023.0.9
fixed in 3.9.25-1.amzn2023.0.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-78367LOW2.52
rpm
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-84233LOW2.52
rpm
4.16.1.3-29.amzn2023.0.7
fixed in 4.16.1.3-29.amzn2023.0.8
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-11586LOW2.48
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-12064LOW2.48
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8458LOW2.48
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.48
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-11586LOW2.48
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-12064LOW2.48
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8458LOW2.48
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8925LOW2.48
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.1
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-91380LOW2.4
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91380LOW2.4
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91380LOW2.4
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91380LOW2.4
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-80230LOW2.22
curl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-83376LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83378LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87255LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87290LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87292LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87367LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91334LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91381LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91409LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91461LOW2.22
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83376LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83378LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87255LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87290LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87292LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87367LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91334LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91381LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91409LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91461LOW2.22
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83376LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83378LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87255LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87290LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87292LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87367LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91334LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91381LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91409LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91461LOW2.22
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-83376LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-83378LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-87255LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87290LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87292LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-87367LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91334LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91381LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91409LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91461LOW2.22
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-80230LOW2.22
libcurl-minimal
8.17.0-1.amzn2023.0.3
fixed in 8.21.0-5.amzn2023.0.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91397LOW2.16
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91397LOW2.16
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91397LOW2.16
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91397LOW2.16
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-91400LOW1.86
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91400LOW1.86
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91400LOW1.86
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91400LOW1.86
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-91335LOW1.56
java-27-amazon-corretto
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91335LOW1.56
java-27-amazon-corretto-devel
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91335LOW1.56
java-27-amazon-corretto-headless
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-91335LOW1.56
java-27-amazon-corretto-jmods
1:27.0.0+35-1.amzn2023.1
fixed in 1:27.0.1.0.10-1.amzn2023.1
0.2%
Theoretical Threat
Directly Exposed

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.