CVE-2026-119116

Vendor

AWS

Product

kmstool-enclave

CVSS v3.1

7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-415, CWE-416

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   AWS bulletin AWS 41h ago

   CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

   Bulletin ID: 2026-157-AWS Publication Date: 10/30/2026 09:00 AM PDT Description: We identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application…

   CVE-2026-119116CVE-2026-119148 Amazon Web Services
2. 16
   CVE NVD 40h ago

   A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c…

   A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to…

   CVSS 7.8 CVE-2026-119116 AWS