Login Request a demo
RU
Product
Runc
by Linuxfoundation · last CVE Jul 1, 2026
17
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 0High 12Medium 3Low 2
Severity
All severities17Critical0High12Medium3Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Runc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-21626
8.6
19%
Jan 31
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
Affected: before 1.1.12
CVE-2019-5736
8.6
98%
Feb 11
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by…
Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +1 more
CVE-2021-30465
8.5
10%
May 27
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal
Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +10 more
CVE-2025-31133
7.8
1%
Nov 6
runc is a CLI tool for spawning and running containers according to the OCI specification
Affected: before 1.2.8; 1.3.0 before 1.3.3; 1.4.0; 1.4.0
CVE-2023-28642
7.8
0%
Mar 29
runc is a CLI tool for spawning and running containers according to the OCI specification
Affected: before 1.1.5
CVE-2022-29162
7.8
0%
May 17
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
Affected: before 1.1.2
CVE-2016-3697
7.8
0%
Jun 1
libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain…
Affected: through 0.0.9
CVE-2025-52881
7.5
1%
Nov 6
runc is a CLI tool for spawning and running containers according to the OCI specification
Affected: before 1.2.8; 1.3.0 before 1.3.3; 1.4.0; 1.4.0
CVE-2025-52565
7.5
1%
Nov 6
runc is a CLI tool for spawning and running containers according to the OCI specification
Affected: 1.0.1 before 1.2.8; 1.3.0 before 1.3.3; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +11 more
CVE-2019-16884
7.5
4%
Sep 25
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount…
Affected: 0.0.1 through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +3 more
CVE-2023-27561
7.0
0%
Mar 3
runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go
Affected: before 1.1.5
CVE-2019-19921
7.0
0%
Feb 12
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go
Affected: through 0.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +4 more
Showing 12