CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-16584 High · 7.0 CWE-455 Jul 23, 2026
AWS API MCP Server Security Policy Bypass via Startup Failure
Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data fails at server startup, the policy check is skipped for the lifetime of the process. IAM permissions on the configured credentials remain in effect and are unaffected. To remediate this issue, users should upgrade to version 1.3.47.
CVE-2022-4662 Medium · 5.5 CWE-455 Dec 22, 2022
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user...
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.