Login Request a demo
RU
Product
runc
by opencontainers · last CVE Jul 1, 2026
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 2
Severity
All severities5Critical0High3Medium0Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add runc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31133
7.8
1%
Nov 6
runc container escape via "masked path" abuse due to mount race conditions
Affected: < 1.2.8; >= 1.3.0-rc.1, < 1.3.3; >= 1.4.0-rc.1, <= 1.4.0-rc.3
CVE-2025-52881
7.5
1%
Nov 6
runc: LSM labels can be bypassed with malicious config using dummy procfs files
Affected: <= 1.2.7, < 1.2.8; <= 1.3.2, < 1.3.3; <= 1.4.0-rc.2, < 1.4.0-rc.3
CVE-2025-52565
7.5
1%
Nov 6
container escape due to /dev/console mount and related races
Affected: >= 1.0.0-rc3, < 1.2.8; >= 1.3.0-rc.1, < 1.3.3; >= 1.4.0-rc.1, < 1.4.0-rc.3
CVE-2024-45310
3.6
0%
Sep 3
runc can be confused to create empty files/directories on the host
Affected: < 1.1.14; >= 1.2.0-rc-1, < 1.2.0-rc.3
CVE-2026-41579
3.3
0%
Jul 1
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
Affected: < 1.3.6; >= 1.4.0-rc.1, < 1.4.3; >= 1.5.0-rc.1, < 1.5.0-rc.3
Showing 5