Containerd (Linuxfoundation) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 281 known versions, newest CVE from 2026-07-01. Vendor: Linuxfoundation.

CVEs of Containerd

• CVE-2026-53489 - CVSS 8.2 (high), 2026-07-01: containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a…
• CVE-2026-53492 - CVSS 9.6 (critical), 2026-07-01: containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device…
• CVE-2026-50195 - CVSS 9.9 (critical), 2026-07-01: containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it…
• CVE-2026-47262 - CVSS 5.5 (medium), 2026-07-01: containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously…
• CVE-2026-46680 - CVSS 7.8 (high), 2026-07-01: containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that…
• CVE-2026-53488 - CVSS 9.4 (critical), 2026-07-01: containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image…
• CVE-2025-64329 - CVSS 6.9 (medium), 2025-11-07: containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through…
• CVE-2024-25621 - CVSS 7.8 (high), 2025-11-06: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through…
• CVE-2025-47291 - CVSS 7.5 (high), 2025-05-21: containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior…
• CVE-2025-47290 - CVSS 7.6 (high), 2025-05-20: containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an…
• CVE-2024-40635 - CVSS 7.8 (high), 2025-03-17: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a…
• CVE-2023-25173 - CVSS 7.8 (high), 2023-02-16: containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up…
• CVE-2023-25153 - CVSS 6.2 (medium), 2023-02-16: containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read…
• CVE-2022-23471 - CVSS 6.5 (medium), 2022-12-07: containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI…
• CVE-2022-31030 - CVSS 5.5 (medium), 2022-06-09: containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the…
• CVE-2022-23648 - CVSS 7.5 (high), 2022-03-03: containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12…
• CVE-2021-43816 - CVSS 9.1 (critical), 2022-01-05: containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since…
• CVE-2021-41103 - CVSS 7.8 (high), 2021-10-04: containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root…
• CVE-2021-32760 - CVSS 6.3 (medium), 2021-07-19: containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container…
• CVE-2021-21334 - CVSS 6.3 (medium), 2021-03-10: In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through…
• CVE-2020-15257 - CVSS 5.2 (medium), 2020-12-01: containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the…
• CVE-2020-15157 - CVSS 6.1 (medium), 2020-10-16: In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the…