Advisories · Technology

Amazon Athena ODBC driver.

Every CVE that names Amazon Athena ODBC driver among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35558 CVE record

CVSS 7.3 High

Improper neutralization of special elements in authentication components in Amazon Athena ODBC driver
- Amazon Athena ODBC driver
- Command injection
Not analysed yet 3 Apr 2026
CVE-2026-35559 CVE record

CVSS 7.1 High

Out-of-bounds write in query processing components in Amazon Athena ODBC driver
- Amazon Athena ODBC driver
- Memory corruption
Not analysed yet 3 Apr 2026
CVE-2026-5485 CVE record

CVSS 7.3 High

OS command injection in Amazon Athena ODBC driver on Linux
- Amazon Athena ODBC driver
- Command injection
Not analysed yet 3 Apr 2026
CVE-2026-35562 CVE record

CVSS 8.7 High

Allocation of resources without limits in parsing components in Amazon Athena ODBC driver
- Amazon Athena ODBC driver
- Denial of service
Not analysed yet 3 Apr 2026
CVE-2026-35561 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver
- Amazon Athena ODBC driver
- Broken access control
Not analysed yet 3 Apr 2026
CVE-2026-35560 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver
- Amazon Athena ODBC driver
- Weak cryptography or TLS
Not analysed yet 3 Apr 2026