Skip to content

Vendor

containerd vulnerabilities

32 published CVES affecting containerd, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
32
Critical
3
High
11
Medium
15
Low
1
Unscored
2
CISA KEV
0
Atom feed of containerd alerts

Products

Latest containerd CVEs

Newest publication first · page 1 of 2

  2. CVE-2026-95838 containerd: Unpack DoS via repeated opaque whiteouts

    Published
    MediumCVSS 4.6 EPSS 0.22%

    containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque...

  4. CVE-2026-107446 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry....

    Published
    MediumCVSS 6.8 EPSS 0.41%

    containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.

  8. CVE-2026-53492 containerd CRI checkpoint restore CDI annotation smuggling

    Published
    HighCVSS 8.4 EPSS 0.35%

    containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a conta...

  9. CVE-2026-50195 containerd: CRI checkpoint import allows local image tag poisoning

    Published
    MediumCVSS 5.6 EPSS 0.30%

    containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions...

  10. CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing

    Published
    MediumCVSS 5.3 EPSS 0.27%

    containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occ...

  11. CVE-2026-46680 containerd user ID handling bypass allows runAsNonRoot evasion

    Published
    HighCVSS 7.3 EPSS 0.16%

    containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted im...

  17. CVE-2024-40635 containerd has an integer overflow in User ID handling

    Published
    HighCVSS 7.8 EPSS 0.30%

    containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultim...

  19. GHSA-7ww5-4wqc-m92c containerd allows RAPL to be accessible to a container

    Published
    Unknown

    /sys/devices/virtual/powercap accessible by default to containers Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap f...

  20. CVE-2023-25173 containerd supplementary groups are not set up properly

    Published
    HighCVSS 7.8 EPSS 0.53%

    containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group acces...

  21. CVE-2023-25153 containerd OCI image importer memory exhaustion

    Published
    MediumCVSS 5.5 EPSS 0.36%

    containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of se...

  23. CVE-2022-31030 containerd CRI plugin: Host memory exhaustion through ExecSync

    Published
    MediumCVSS 5.5 EPSS 0.39%

    containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the ExecSync API. This can cause containerd to consume all...

  24. CVE-2022-24778 Incorrect Authorization in imgcrypt

    Published
    HighCVSS 7.5 EPSS 2.7%

    The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the...

  25. CVE-2022-23648 Insecure handling of image volumes in containerd CRI plugin

    Published
    HighCVSS 7.5 EPSS 27.4% Public exploit

    containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.