https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-5485.htmlhttps://patchthecve.com/cve/CVE-2026-5485.htmlTue, 20 Oct 2026 19:17:39 +0000HIGH 7.8: OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To https://patchthecve.com/cve/CVE-2026-35562.htmlhttps://patchthecve.com/cve/CVE-2026-35562.htmlTue, 20 Oct 2026 19:17:36 +0000HIGH 7.5: Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this ihttps://patchthecve.com/cve/CVE-2026-35561.htmlhttps://patchthecve.com/cve/CVE-2026-35561.htmlTue, 20 Oct 2026 19:17:36 +0000HIGH 7.4: Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediathttps://patchthecve.com/cve/CVE-2026-35560.htmlhttps://patchthecve.com/cve/CVE-2026-35560.htmlTue, 20 Oct 2026 19:17:36 +0000HIGH 7.4: Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This ohttps://patchthecve.com/cve/CVE-2026-35559.htmlhttps://patchthecve.com/cve/CVE-2026-35559.htmlTue, 20 Oct 2026 19:17:35 +0000MEDIUM 6.5: Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0https://patchthecve.com/cve/CVE-2026-35558.htmlhttps://patchthecve.com/cve/CVE-2026-35558.htmlTue, 20 Oct 2026 19:17:35 +0000HIGH 7.8: Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during user