7.9.0 common vulnerabilities and exposures

The following table lists all CVEs that don't impact EMR Serverless applications that run on recommended configurations of Amazon EMR 7.9.0. Amazon EMR is dependent on upstream open-source for availability of fixes and will provide the latest stable version as part of the Core Engine components within 90 days of Amazon EMR verifying the fixes.

This table was updated on August 21, 2026.

CVE ID	Severity	CVE details URL
CVE-2019-10202	CRITICAL	https://nvd.nist.gov/vuln/detail/CVE-2019-10202
CVE-2022-46337	CRITICAL	https://nvd.nist.gov/vuln/detail/CVE-2022-46337
CVE-2024-47561	CRITICAL	https://nvd.nist.gov/vuln/detail/CVE-2024-47561
CVE-2025-30065	CRITICAL	https://nvd.nist.gov/vuln/detail/CVE-2025-30065
CVE-2015-6420	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2015-6420
CVE-2020-13949	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2020-13949
CVE-2023-2976	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2023-2976
CVE-2023-52428	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2023-52428
CVE-2024-13009	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-13009
CVE-2024-21634	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-21634
CVE-2024-22201	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-22201
CVE-2024-25638	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-25638
CVE-2024-36114	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-36114
CVE-2024-47554	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-47554
CVE-2024-7254	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2024-7254
CVE-2025-24970	HIGH	https://nvd.nist.gov/vuln/detail/CVE-2025-24970