containerd

Products

Exploited and recent CVEs

• CVE-2026-47218 Critical 9.3 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox 0.4%
• CVE-2026-95838 Medium 4.6 containerd: Unpack DoS via repeated opaque whiteouts 0.2%
• CVE-2026-95837 High 7.8 containerd CRI plugin: Checkpoint restore bypasses destination security context 0.1%
• CVE-2026-107446 Medium 6.8 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry 0.4%
• CVE-2026-53493 Medium 6.9 Containerd has image-pull DoS via crafted OCI index graph amplification 0.4%
• CVE-2026-53495 Medium 6.8 containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service 0.2%
• CVE-2026-53489 High 8.2 containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 0.2%
• CVE-2026-53492 High 8.4 containerd CRI checkpoint restore CDI annotation smuggling 0.4%
• CVE-2026-50195 Medium 5.6 containerd: CRI checkpoint import allows local image tag poisoning 0.3%
• CVE-2026-47262 Medium 5.3 containerd image-triggered runtime DoS via unbounded group parsing 0.3%
• CVE-2026-46680 High 7.3 containerd user ID handling bypass allows runAsNonRoot evasion 0.2%
• CVE-2026-53488 Critical 9.4 containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 0.2%
• CVE-2025-64329 Medium 6.9 containerd CRI server: Host memory exhaustion through Attach goroutine leak 0.2%
• CVE-2024-25621 High 7.3 containerd affected by a local privilege escalation via wide permissions on CRI directory 0.2%
• CVE-2025-47291 Medium 4.6 containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. 0.3%
• CVE-2025-47290 High 7.6 Containerd vulnerable to host filesystem access during image unpack 0.5%
• CVE-2024-40635 Medium 4.6 containerd has an integer overflow in User ID handling 0.3%
• CVE-2023-25173 Medium 5.3 containerd supplementary groups are not set up properly 0.5%
• CVE-2023-25153 Medium 6.2 containerd OCI image importer memory exhaustion 0.4%
• CVE-2022-23471 Medium 5.7 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 1.1%
• CVE-2022-31030 Medium 5.5 containerd CRI plugin: Host memory exhaustion through ExecSync 0.4%
• CVE-2022-24778 High 7.5 Incorrect Authorization in imgcrypt 2.7%
• CVE-2022-23648 High 7.5 Insecure handling of image volumes in containerd CRI plugin 27.4%
• CVE-2021-43816 High 8.0 Improper Preservation of Permissions in containerd 1.8%
• CVE-2021-41103 Medium 5.9 Insufficiently restricted permissions on plugin directories 0.5%
• CVE-2021-32760 Medium 5.0 Archive package allows chmod of file outside of unpack target directory 1.6%
• CVE-2021-21334 Medium 6.3 environment variable leak 1.9%
• CVE-2020-15257 Medium 5.2 containerd-shim API Exposed to Host Network Containers 3.1%
• CVE-2020-15157 Medium 6.1 containerd can be coerced into leaking credentials during image pull 2.3%