RU
Product
Runc
17
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 3Low 2
Watch
Add Runc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21626 | 8.6 | Jan 31 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification Affected: before 1.1.12 |
| CVE-2019-5736 | 8.6 | Feb 11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by… Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +1 more |
| CVE-2021-30465 | 8.5 | May 27 | runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +10 more |
| CVE-2025-31133 | 7.8 | Nov 6 | runc is a CLI tool for spawning and running containers according to the OCI specification Affected: before 1.2.8; 1.3.0 before 1.3.3; 1.4.0; 1.4.0 |
| CVE-2023-28642 | 7.8 | Mar 29 | runc is a CLI tool for spawning and running containers according to the OCI specification Affected: before 1.1.5 |
| CVE-2022-29162 | 7.8 | May 17 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification Affected: before 1.1.2 |
| CVE-2016-3697 | 7.8 | Jun 1 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain… Affected: through 0.0.9 |
| CVE-2025-52881 | 7.5 | Nov 6 | runc is a CLI tool for spawning and running containers according to the OCI specification Affected: before 1.2.8; 1.3.0 before 1.3.3; 1.4.0; 1.4.0 |
| CVE-2025-52565 | 7.5 | Nov 6 | runc is a CLI tool for spawning and running containers according to the OCI specification Affected: 1.0.1 before 1.2.8; 1.3.0 before 1.3.3; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +11 more |
| CVE-2019-16884 | 7.5 | Sep 25 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount… Affected: 0.0.1 through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +3 more |
| CVE-2023-27561 | 7.0 | Mar 3 | runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go Affected: before 1.1.5 |
| CVE-2019-19921 | 7.0 | Feb 12 | runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +4 more |
| CVE-2023-25809 | 6.3 | Mar 29 | runc is a CLI tool for spawning and running containers according to the OCI specification Affected: before 1.1.5 |
| CVE-2022-24769 | 5.9 | Mar 24 | Moby is an open-source project created by Docker to enable and accelerate software containerization Affected: before 1.1.2 |
| CVE-2021-43784 | 5.0 | Dec 6 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification Affected: before 1.0.3 |
| CVE-2024-45310 | 3.6 | Sep 3 | runc can be confused to create empty files/directories on the host Affected: before 1.1.14; 1.2.0; 1.2.0 |
| CVE-2026-41579 | 3.3 | Jul 1 | runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations Affected: before 1.3.6; 1.4.0 before 1.4.3; 1.5.0; 1.5.0 |
Showing 17