Containerd - vulnerabilities (CVEs)

29 CVEs in 4 products, 4 in the last 30 days, newest from 2026-10-15.

Products

Containerd - 26 CVEs
Imgcrypt - 1 CVEs
Overlaybd - 1 CVEs
Runwasi - 1 CVEs

Newest CVEs of Containerd

CVE-2026-47218 - CVSS 9.3 (critical), 2026-10-15: runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes…
CVE-2026-95838 - CVSS 4.6 (medium), 2026-10-12: containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories…
CVE-2026-95837 - CVSS 7.8 (high), 2026-10-12: containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because…
CVE-2026-107446 - CVSS 6.8 (medium), 2026-10-08: containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an…
CVE-2026-53493 - CVSS 6.9 (medium), 2026-09-25: containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high…
CVE-2026-53495 - CVSS 6.8 (medium), 2026-09-14: containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely…
CVE-2026-53489 - CVSS 8.2 (high), 2026-07-01: containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a…
CVE-2026-53492 - CVSS 9.6 (critical), 2026-07-01: containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device…
CVE-2026-50195 - CVSS 9.9 (critical), 2026-07-01: containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it…
CVE-2026-47262 - CVSS 5.5 (medium), 2026-07-01: containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously…
CVE-2026-46680 - CVSS 7.8 (high), 2026-07-01: containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that…
CVE-2026-53488 - CVSS 9.4 (critical), 2026-07-01: containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image…
CVE-2025-64329 - CVSS 6.9 (medium), 2025-11-07: containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through…
CVE-2024-25621 - CVSS 7.8 (high), 2025-11-06: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through…
CVE-2025-47291 - CVSS 7.5 (high), 2025-05-21: containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior…
CVE-2025-47290 - CVSS 7.6 (high), 2025-05-20: containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an…
CVE-2024-40635 - CVSS 7.8 (high), 2025-03-17: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a…
CVE-2023-25173 - CVSS 7.8 (high), 2023-02-16: containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up…
CVE-2023-25153 - CVSS 6.2 (medium), 2023-02-16: containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read…
CVE-2022-23471 - CVSS 6.5 (medium), 2022-12-07: containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI…
CVE-2022-31030 - CVSS 5.5 (medium), 2022-06-09: containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the…
CVE-2022-24778 - CVSS 7.5 (high), 2022-03-25: The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by…
CVE-2022-23648 - CVSS 7.5 (high), 2022-03-03: containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12…
CVE-2021-43816 - CVSS 9.1 (critical), 2022-01-05: containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since…
CVE-2021-41103 - CVSS 7.8 (high), 2021-10-04: containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root…
CVE-2021-32760 - CVSS 6.3 (medium), 2021-07-19: containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container…
CVE-2021-21334 - CVSS 6.3 (medium), 2021-03-10: In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through…
CVE-2020-15257 - CVSS 5.2 (medium), 2020-12-01: containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the…
CVE-2020-15157 - CVSS 6.1 (medium), 2020-10-16: In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the…