AWS Security ChangesHomeSearch

AWS emr: Added 3 CVEs to EMR on EKS 7.2.0 non-impacting CVE table

Service: emr · 2026-10-10 · Security-related medium

File: emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-720-common-vulnerabilities-exposures.md · CVE: CVE-2026-40468

Summary

Updated the 'CVE not impacting EMR on EKS 7.2.0' table date to October 9, 2026 and added one MEDIUM (CVE-2026-40468) and two LOW (CVE-2026-1502, CVE-2026-47059) CVE entries with NVD links.

Security assessment

Only a date refresh plus three CVE rows (one MEDIUM, two LOW) are appended to the table of vulnerabilities that do not impact EMR on EKS 7.2.0 job runs; this is security triage documentation with no remediation or exposure change, hence medium severity.

Evidence

+CVE-2026-40468 |  MEDIUM |  [https://nvd.nist.gov/vuln/detail/CVE-2026-40468](https://nvd.nist.gov/vuln/detail/CVE-2026-40468)  

Diff

diff --git a/emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-720-common-vulnerabilities-exposures.md b/emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-720-common-vulnerabilities-exposures.md
index 3bf8f00..8084415 100644
--- a//emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-720-common-vulnerabilities-exposures.md
+++ b//emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-720-common-vulnerabilities-exposures.md
@@ -11 +11 @@ The following table lists all CVEs that don't impact EMR on EKS job runs that ru
-This table was updated on August 21, 2026.
+This table was updated on October 9, 2026.
@@ -55,0 +56 @@ CVE-2024-29133 |  MEDIUM |  [https://nvd.nist.gov/vuln/detail/CVE-2024-29133](ht
+CVE-2026-40468 |  MEDIUM |  [https://nvd.nist.gov/vuln/detail/CVE-2026-40468](https://nvd.nist.gov/vuln/detail/CVE-2026-40468)  
@@ -56,0 +58,2 @@ CVE-2020-8908 |  LOW |  [https://nvd.nist.gov/vuln/detail/CVE-2020-8908](https:/
+CVE-2026-1502 |  LOW |  [https://nvd.nist.gov/vuln/detail/CVE-2026-1502](https://nvd.nist.gov/vuln/detail/CVE-2026-1502)  
+CVE-2026-47059 |  LOW |  [https://nvd.nist.gov/vuln/detail/CVE-2026-47059](https://nvd.nist.gov/vuln/detail/CVE-2026-47059)