CO
Product
Containerd
22
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 11Low 0
Watch
Add Containerd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53488 | 8.8 | Jul 1 | containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull Affected: 1.7.0 before 1.7.33; 2.0.0 before 2.0.10; 2.1.0 before 2.1.9; 2.2.0 before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2026-46680 | 7.8 | Jul 1 | containerd user ID handling bypass allows runAsNonRoot evasion Affected: 1.7.27 before 1.7.32; 2.0.4 before 2.0.9; 2.1.0 before 2.2.4; 2.3.0 before 2.3.1 |
| CVE-2024-25621 | 7.8 | Nov 6 | containerd is an open-source container runtime Affected: before 1.7.29; 2.0.0 before 2.0.7; 2.1.0 before 2.1.5; 2.2.0; 2.2.0; 2.2.0; +2 more |
| CVE-2024-40635 | 7.8 | Mar 17 | containerd is an open-source container runtime Affected: before 1.6.38; 1.7.0 before 1.7.27; 2.0.0 before 2.0.4 |
| CVE-2023-25173 | 7.8 | Feb 16 | containerd is an open source container runtime Affected: before 1.5.18; 1.6.0 before 1.6.18 |
| CVE-2021-41103 | 7.8 | Oct 4 | containerd is an open source container runtime with an emphasis on simplicity, robustness and portability Affected: before 1.4.11; 1.5.0 before 1.5.7 |
| CVE-2025-47291 | 7.5 | May 21 | containerd is an open-source container runtime Affected: 2.0.1 before 2.0.5 |
| CVE-2022-23648 | 7.5 | Mar 3 | containerd is a container runtime available as a daemon for Linux and Windows Affected: before 1.4.13; 1.5.0 before 1.5.10; 1.6.0 before 1.6.1 |
Showing 8
