Skip to content
Containerd vulnerabilities
Newest
-
containerd runwasi
runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox
CVE-2026-47218
9.3 Critical
-
containerd
containerd: Unpack DoS via repeated opaque whiteouts
CVE-2026-95838
Fix available
4.6 Medium
-
containerd
containerd CRI plugin: Checkpoint restore bypasses destination security context
CVE-2026-95837
Fix available
7.8 High
-
containerd overlaybd
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow ...
CVE-2026-107446
6.8 Medium
-
containerd
Containerd has image-pull DoS via crafted OCI index graph amplification
CVE-2026-53493
Fix available
6.9 Medium
-
containerd
containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
CVE-2026-53495
Fix available
6.8 Medium
-
containerd
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
CVE-2026-53488
Fix available
9.4 Critical
-
containerd
containerd: CRI checkpoint import allows local image tag poisoning
CVE-2026-50195
Fix available
5.6 Medium
-
containerd
containerd image-triggered runtime DoS via unbounded group parsing
CVE-2026-47262
Fix available
5.3 Medium
-
containerd
containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-53492
Fix available
8.4 High
-
containerd
containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVE-2026-53489
Fix available
8.2 High
-
containerd
containerd user ID handling bypass allows runAsNonRoot evasion
CVE-2026-46680
Public exploitFix available
7.3 High
-
containerd
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329
Fix available
6.9 Medium
-
containerd
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621
Fix available
7.3 High
-
containerd
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
CVE-2025-47291
Fix available
4.6 Medium
-
containerd
Containerd vulnerable to host filesystem access during image unpack
CVE-2025-47290
Fix available
7.6 High
-
containerd, debian linux +1 more
containerd has an integer overflow in User ID handling
CVE-2024-40635
Public exploitFix available
4.6 Medium
-
containerd
containerd supplementary groups are not set up properly
CVE-2023-25173
Fix available
5.3 Medium
-
containerd
containerd OCI image importer memory exhaustion
CVE-2023-25153
Fix available
6.2 Medium
-
containerd
containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak
CVE-2022-23471
Fix available
5.7 Medium
-
containerd, debian linux, fedoraproject fedora +2 more
containerd CRI plugin: Host memory exhaustion through ExecSync
CVE-2022-31030
Fix available
5.5 Medium
-
containerd imgcrypt, fedoraproject fedora +1 more
Incorrect Authorization in imgcrypt
CVE-2022-24778
Fix available
7.5 High
-
containerd, debian linux, fedoraproject fedora +2 more
Insecure handling of image volumes in containerd CRI plugin
CVE-2022-23648
Public exploitFix available
EPSS 27.4%
7.5 High
-
containerd, fedoraproject fedora +1 more
Improper Preservation of Permissions in containerd
CVE-2021-43816
Fix available
8.0 High
-
containerd, debian linux, fedoraproject fedora +2 more
Insufficiently restricted permissions on plugin directories
CVE-2021-41103
Fix available
5.9 Medium
-
containerd, fedoraproject fedora +1 more
Archive package allows chmod of file outside of unpack target directory
CVE-2021-32760
Fix available
5.0 Medium
-
containerd, fedoraproject fedora +1 more
environment variable leak
CVE-2021-21334
Fix available
6.3 Medium
-
containerd, debian linux, fedoraproject fedora +2 more
containerd-shim API Exposed to Host Network Containers
CVE-2020-15257
Public exploitFix available
5.2 Medium
-
containerd, canonical ubuntu linux, debian linux +2 more
containerd can be coerced into leaking credentials during image pull
CVE-2020-15157
Fix available
6.1 Medium