CO
Product
Containerd
22
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 11Low 0
Watch
Add Containerd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50195 | 9.9 | Jul 1 | containerd: CRI checkpoint import allows local image tag poisoning Affected: 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2026-53492 | 9.6 | Jul 1 | containerd CRI checkpoint restore CDI annotation smuggling Affected: 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2021-43816 | 9.1 | Jan 5 | containerd is an open source container runtime Affected: 1.5.1 before 1.5.9; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +5 more |
| CVE-2026-53488 | 8.8 | Jul 1 | containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull Affected: 1.7.0 before 1.7.33; 2.0.0 before 2.0.10; 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2026-46680 | 7.8 | Jul 1 | containerd user ID handling bypass allows runAsNonRoot evasion Affected: 1.7.27 before 1.7.32; 2.0.4 before 2.0.9; 2.1.0 before 2.2.4; 2.3.0 before 2.3.1 |
| CVE-2024-25621 | 7.8 | Nov 6 | containerd is an open-source container runtime Affected: before 1.7.29; 2.0.0 before 2.0.7; 2.1.0 before 2.1.5; 2.2.0; 2.2.0; 2.2.0; +2 more |
| CVE-2024-40635 | 7.8 | Mar 17 | containerd is an open-source container runtime Affected: before 1.6.38; 1.7.0 before 1.7.27; 2.0.0 before 2.0.4 |
| CVE-2023-25173 | 7.8 | Feb 16 | containerd is an open source container runtime Affected: before 1.5.18; 1.6.0 before 1.6.18 |
| CVE-2021-41103 | 7.8 | Oct 4 | containerd is an open source container runtime with an emphasis on simplicity, robustness and portability Affected: before 1.4.11; 1.5.0 before 1.5.7 |
| CVE-2025-47291 | 7.5 | May 21 | containerd is an open-source container runtime Affected: 2.0.1 before 2.0.5 |
| CVE-2022-23648 | 7.5 | Mar 3 | containerd is a container runtime available as a daemon for Linux and Windows Affected: before 1.4.13; 1.5.0 before 1.5.10; 1.6.0 before 1.6.1 |
| CVE-2026-53489 | 6.5 | Jul 1 | containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore Affected: 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2022-23471 | 6.5 | Dec 7 | containerd is an open source container runtime Affected: before 1.5.16; 1.6.0 before 1.6.12 |
| CVE-2021-32760 | 6.3 | Jul 19 | containerd is a container runtime Affected: before 1.4.8; 1.5.0 before 1.5.4 |
| CVE-2021-21334 | 6.3 | Mar 10 | In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl,… Affected: before 1.3.10; 1.4.0 before 1.4.4 |
| CVE-2020-15157 | 6.1 | Oct 16 | In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability Affected: 1.2.0 before 1.2.14; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +3 more |
| CVE-2025-47290 | 5.9 | May 20 | containerd is a container runtime Affected: 2.1.0 |
| CVE-2026-47262 | 5.5 | Jul 1 | containerd image-triggered runtime DoS via unbounded group parsing Affected: 1.7.0 before 1.7.33; 2.0.0 before 2.0.10; 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2025-64329 | 5.5 | Nov 7 | containerd is an open-source container runtime Affected: before 1.7.29; 2.0.0 before 2.0.7; 2.1.0 before 2.1.5; 2.2.0; 2.2.0; 2.2.0; +2 more |
| CVE-2023-25153 | 5.5 | Feb 16 | containerd is an open source container runtime Affected: before 1.5.18; 1.6.0 before 1.6.18 |
| CVE-2022-31030 | 5.5 | Jun 9 | containerd is an open source container runtime Affected: before 1.5.13; 1.6.0 before 1.6.6 |
| CVE-2020-15257 | 5.2 | Dec 1 | containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows Affected: before 1.3.9; 1.4.0 before 1.4.3 |
Showing 22