Login Request a demo
CO
Product
containerd
by containerd · last CVE Oct 12, 2026
10
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 3Medium 5Low 0
Severity
All severities10Critical2High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add containerd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50195
9.9
0%
Jul 1
containerd: CRI checkpoint import allows local image tag poisoning
Affected: >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-53492
9.6
0%
Jul 1
containerd CRI checkpoint restore CDI annotation smuggling
Affected: >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-53488
8.8
0%
Jul 1
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
Affected: < 1.7.33; >= 2.0.0, < 2.0.10; >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-95837
7.8
0%
Oct 12
containerd CRI plugin: Checkpoint restore bypasses destination security context
Affected: >= 2.1.0, < 2.2.7; >= 2.3.0, < 2.3.4
CVE-2026-46680
7.8
0%
Jul 1
containerd user ID handling bypass allows runAsNonRoot evasion
Affected: < 1.7.32; >= 2.0.4, < 2.0.9; >= 2.0.10, < 2.2.4; >= 2.2.5, < 2.3.1
CVE-2026-53493
6.9
0%
Sep 25
Containerd has image-pull DoS via crafted OCI index graph amplification
Affected: >= 2.0.0, < 2.0.13; < 1.7.36; >= 2.1.0, < 2.2.9; >= 2.3.0, < 2.3.6; = 2.4.0
CVE-2026-53495
6.8
0%
Sep 14
containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
Affected: < 1.7.35; >= 2.0.0, < 2.0.12; >= 2.2.0, < 2.2.8; >= 2.3.0, < 2.3.5
CVE-2026-53489
6.5
0%
Jul 1
containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
Affected: >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-47262
5.5
0%
Jul 1
containerd image-triggered runtime DoS via unbounded group parsing
Affected: >= 1.7.0, < 1.7.33; >= 2.0.0, < 2.0.10; >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-95838
4.6
0%
Oct 12
containerd: Unpack DoS via repeated opaque whiteouts
Affected: < 1.7.35; >= 2.0.0-beta.0, < 2.0.12; >= 2.2.0, < 2.2.8; >= 2.3.0, < 2.3.5
Showing 10