Login Request a demo
CO
Product
containerd
by containerd · last CVE Oct 12, 2026
10
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 3Medium 5Low 0
Severity
All severities10Critical2High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add containerd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53493
6.9
0%
Sep 25
Containerd has image-pull DoS via crafted OCI index graph amplification
Affected: >= 2.0.0, < 2.0.13; < 1.7.36; >= 2.1.0, < 2.2.9; >= 2.3.0, < 2.3.6; = 2.4.0
CVE-2026-53495
6.8
0%
Sep 14
containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
Affected: < 1.7.35; >= 2.0.0, < 2.0.12; >= 2.2.0, < 2.2.8; >= 2.3.0, < 2.3.5
CVE-2026-53489
6.5
0%
Jul 1
containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
Affected: >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-47262
5.5
0%
Jul 1
containerd image-triggered runtime DoS via unbounded group parsing
Affected: >= 1.7.0, < 1.7.33; >= 2.0.0, < 2.0.10; >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-95838
4.6
0%
Oct 12
containerd: Unpack DoS via repeated opaque whiteouts
Affected: < 1.7.35; >= 2.0.0-beta.0, < 2.0.12; >= 2.2.0, < 2.2.8; >= 2.3.0, < 2.3.5
Showing 5