CVE-2026-119148

Vendor

AWS

Product

aws-nitro-enclaves-sdk-c

CVSS v3.1

6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Weakness

CWE-807

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   AWS bulletin AWS 41h ago

   CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

   Bulletin ID: 2026-157-AWS Publication Date: 10/30/2026 09:00 AM PDT Description: We identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application…

   CVE-2026-119116CVE-2026-119148 Amazon Web Services
2. 14
   CVE NVD 40h ago

   Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint.

   Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against…

   CVSS 6.5 CVE-2026-119148 AWS