Ccontainers

Products

Exploited and recent CVEs

• CVE-2026-88264 Medium 5.6 Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 0.1%
• CVE-2026-44517 Medium 6.3 Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive 0.2%
• CVE-2026-47766 Medium 5.1 crun follows rootfs /dev symlink while creating default devices 0.2%
• CVE-2026-52791 Low 2.0 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC) 0.1%
• CVE-2026-41163 High 7.0 bubblewrap vulnerable to privilege escalation in setuid mode via ptrace 0.3%
• CVE-2026-33414 High 8.8 PowerShell Command Injection in Podman HyperV Machine 0.6%
• CVE-2026-35406 Medium 6.2 Aardvark-dns has incorrect error handling for malformed tcp packets 0.4%
• CVE-2026-30892 None 0.0 Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.2%
• CVE-2025-24965 High 8.5 .krun_config.json symlink attack creates or overwrites file on the host in crun 0.6%
• CVE-2020-5291 High 7.2 Privilege escalation in setuid mode via user namespaces in Bubblewrap 0.9%