Amazon Amazon.Extensions.S3.Encryption vulnerabilities (CVE)

CVE records published for Amazon Amazon.Extensions.S3.Encryption, newest first. Follow to get an email when a new one appears.

1 results

5.3Medium

CVE-2026-110310 28 days ago

RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

Amazon Amazon.Extensions.S3.Encryption

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack…