CR
Product
crun
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add crun to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30892 | 7.8 | Mar 25 | Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation Affected: >= 1.19, < 1.27 |
| CVE-2026-88264 | 5.6 | Sep 10 | Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs Affected: through 1.29.1 |
| CVE-2026-47766 | 5.1 | Aug 14 | crun follows rootfs /dev symlink while creating default devices Affected: < 1.28 |
Showing 3