CO
Vendor
containerd
3 products with CVEs on record
12
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-47218
RU
runwasi
containerd
9.3
0%
Oct 15runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox
CVE-2026-95838
CO
containerd
containerd
4.6
0%
Oct 12containerd: Unpack DoS via repeated opaque whiteouts
CVE-2026-95837
CO
containerd
containerd
7.8
0%
Oct 12containerd CRI plugin: Checkpoint restore bypasses destination security context
CVE-2026-107446
OV
overlaybd
containerd
6.8
0%
Oct 8containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd…
CVE-2026-53493
CO
containerd
containerd
6.9
0%
Sep 25Containerd has image-pull DoS via crafted OCI index graph amplification
CVE-2026-53495
CO
containerd
containerd
6.8
0%
Sep 14containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
CVE-2026-53489
CO
containerd
containerd
6.5
0%
Jul 1containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVE-2026-53492
CO
containerd
containerd
9.6
0%
Jul 1containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-50195
CO
containerd
containerd
9.9
0%
Jul 1containerd: CRI checkpoint import allows local image tag poisoning
CVE-2026-47262
CO
containerd
containerd
5.5
0%
Jul 1containerd image-triggered runtime DoS via unbounded group parsing
CVE-2026-46680
CO
containerd
containerd
7.8
0%
Jul 1containerd user ID handling bypass allows runAsNonRoot evasion
CVE-2026-53488
CO
containerd
containerd
8.8
0%
Jul 1containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull