Amazon WorkSpaces Parameter Injection Vulnerability

Amazon WorkSpaces, a fully managed persistent desktop virtualization service from Amazon, lets your users access the data, applications, and resources they need from any supported device, anytime, anywhere. In Amazon AWS WorkSpaces clients prior to version 3.1.9 on Windows, parameter injection in the workspaces:// URI handler could lead to remote code execution due to the Chromium Embedded Framework (CEF) --gpu-launcher parameter. No detailed vulnerability details are currently available.