CVE-2026-3338 PKCS7_verify Signature Validation Bypass in AWS

Back Api.Msrc.Microsoft

CVE-2026-3338 PKCS7_verify Signature Validation Bypass in AWS

Api.Msrc.Microsoft • March 5, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple PKCS7_verify Vulnerabilities Discovered in AWS Two critical vulnerabilities, CVE-2026-3336 and CVE-2026-3338, affecting AWS have been published, both on March 2, 2026. CVE-2026-3336 allows a certificate chain validation bypass, while CVE-2026-3338 enables a signature validation bypass, potentially exposing users to significant security risks. 2 sources 67

Extracted Entities

Companies (1)

CVEs (1)

Vulnerabilities (1)

PKCS7_verify Signature Validation Bypass