Skip to content
Opencontainers vulnerabilities
Newest
-
linuxfoundation runc
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
CVE-2026-41579
Fix available
3.3 Low
-
linuxfoundation runc
runc: LSM labels can be bypassed with malicious config using dummy procfs files
CVE-2025-52881
Public exploitFix available
7.3 High
-
linuxfoundation runc
container escape due to /dev/console mount and related races
CVE-2025-52565
Fix available
8.4 High
-
linuxfoundation runc
runc container escape via "masked path" abuse due to mount race conditions
CVE-2025-31133
Public exploitFix available
7.3 High
-
linuxfoundation runc
runc can be confused to create empty files/directories on the host
CVE-2024-45310
Fix available
3.6 Low
-
linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 more
runc container breakout through process.cwd trickery and leaked fds
CVE-2024-21626
Public exploitFix available
EPSS 18.9%
8.6 High
-
linuxfoundation runc
rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc
CVE-2023-25809
Fix available
5.0 Medium
-
linuxfoundation runc
AppArmor bypass with symlinked /proc in runc
CVE-2023-28642
Fix available
6.1 Medium
-
linuxfoundation runc, fedoraproject fedora +1 more
Incorrect Default Permissions in runc
CVE-2022-29162
Fix available
5.9 Medium
-
debian linux, linuxfoundation runc +1 more
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
CVE-2021-43784
Fix available
6.0 Medium
-
fedoraproject fedora, linuxfoundation open container initiative distribution specification, open container initiative image format specification +1 more +3 more
Clarify Content-Type handling in OCI spec
CVE-2021-41190
Fix available
3.0 Low