Skip to content

Product

azure linux containerd vulnerabilities

2 published CVES affecting azure linux containerd, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest azure linux containerd CVEs

Newest publication first

  1. CVE-2024-40635 containerd has an integer overflow in User ID handling

    Published
    HighCVSS 7.8 EPSS 0.30%

    containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultim...

  2. CVE-2025-27144 Go JOSE's Parsing Vulnerable to Denial of Service

    Published
    MediumCVSS 6.6 EPSS 0.40%

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when par...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.