Amazon Workspaces Client vulnerabilities

2 CVEs affecting Amazon Workspaces Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-0501, published 2025-01-15.

More from Amazon.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-0500, published 2025-01-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via…
• CVE-2025-0501, published 2025-01-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.