Critical Vulnerabilities Discovered in AWS-LC Cryptographic Library

Critical Vulnerabilities Discovered in AWS-LC Cryptographic Library

First seen 6 Mar 2026, 13:12 UTC GbhackersCybersecuritynewsCyberpress 66.0

Article Content

Browse articles
ThreatCluster

Amazon has issued a critical security bulletin detailing three high-severity vulnerabilities in its open-source cryptographic library, AWS-LC. These vulnerabilities allow unauthenticated attackers to bypass certificate chain verification and exploit timing side-channels, potentially compromising cryptographic integrity across affected environments. The flaws were discovered through a coordinated disclosure process with the AISLE Research Team.

Timeline

2026-03-02
Amazon publishes security bulletin addressing vulnerabilities
2026-03-06
Articles published reporting on the vulnerabilities