Runc (Linuxfoundation) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 83 known versions, newest CVE from 2026-07-01. Vendor: Linuxfoundation.

CVEs of Runc

• CVE-2026-41579 - CVSS 3.3 (low), 2026-07-01: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1,…
• CVE-2025-52881 - CVSS 7.5 (high), 2025-11-06: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc…
• CVE-2025-52565 - CVSS 8.4 (high), 2025-11-06: runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and…
• CVE-2025-31133 - CVSS 7.8 (high), 2025-11-06: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1…
• CVE-2024-45310 - CVSS 3.6 (low), 2024-09-03: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be…
• CVE-2024-21626 - CVSS 8.6 (high), 2024-01-31: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file…
• CVE-2023-28642 - CVSS 7.8 (high), 2023-03-29: runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the…
• CVE-2023-25809 - CVSS 6.3 (medium), 2023-03-29: runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes…
• CVE-2023-27561 - CVSS 7 (high), 2023-03-03: runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker…
• CVE-2022-29162 - CVSS 7.8 (high), 2022-05-17: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc…
• CVE-2022-24769 - CVSS 5.9 (medium), 2022-03-24: Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version…
• CVE-2021-43784 - CVSS 6 (medium), 2021-12-06: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization…
• CVE-2021-30465 - CVSS 8.5 (high), 2021-05-27: runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create…
• CVE-2019-19921 - CVSS 7 (high), 2020-02-12: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker…
• CVE-2019-16884 - CVSS 7.5 (high), 2019-09-25: runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go…
• CVE-2019-5736 - CVSS 8.6 (high), 2019-02-11: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host…
• CVE-2016-3697 - CVSS 7.8 (high), 2016-06-01: libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local…