AWS emr: EMR Serverless 7.12.0: drop CVE-2025-52999 from non-impacting list
Summary
Updated the table date to October 9, 2026, removed CVE-2025-52999 (HIGH) from the table of CVEs that do not impact EMR Serverless, and added CVE-2026-25087 (HIGH) to that table.
Security assessment
Deleting a HIGH-severity CVE from the 'CVEs that don't impact EMR Serverless' table indicates a re-assessment that the issue is no longer non-impacting for this version (i.e., it now applies or requires attention), which is a concrete security posture change for the service; the accompanying added entry and date bump show the table was re-reviewed.
Evidence
-CVE-2025-52999 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2025-52999](https://nvd.nist.gov/vuln/detail/CVE-2025-52999)
Diff
diff --git a/emr/latest/EMR-Serverless-UserGuide/emr-serverless-7120-common-vulnerabilities-exposures.md b/emr/latest/EMR-Serverless-UserGuide/emr-serverless-7120-common-vulnerabilities-exposures.md index b01fd16..008d3d6 100644 --- a//emr/latest/EMR-Serverless-UserGuide/emr-serverless-7120-common-vulnerabilities-exposures.md +++ b//emr/latest/EMR-Serverless-UserGuide/emr-serverless-7120-common-vulnerabilities-exposures.md @@ -11 +11 @@ The following table lists all CVEs that don't impact EMR Serverless applications -This table was updated on August 21, 2026. +This table was updated on October 9, 2026. @@ -31 +30,0 @@ CVE-2025-46762 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2025-46762](http -CVE-2025-52999 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2025-52999](https://nvd.nist.gov/vuln/detail/CVE-2025-52999) @@ -50,0 +50 @@ CVE-2026-24882 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2026-24882](http +CVE-2026-25087 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2026-25087](https://nvd.nist.gov/vuln/detail/CVE-2026-25087)