CO
Vendor
containers
10
CVEs
0
On KEV
0
New 30D
Products
CR7.8
crun
containers
3 CVEs0 on KEV0 new
AA7.5
aardvark-dns
containers
2 CVEs0 on KEV0 new
BU7.0
bubblewrap
containers
1 CVEs0 on KEV0 new
BU6.3
buildah
containers
1 CVEs0 on KEV0 new
CO8.2
Common
Containers
1 CVEs0 on KEV0 new
FU2.0
fuse-overlayfs
containers
1 CVEs0 on KEV0 new
PO7.8
podman
containers
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88264 | CR crun containers | 5.6 | Sep 10 | Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs |
| CVE-2026-44517 | BU buildah containers | 6.3 | Aug 21 | Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive |
| CVE-2026-47766 | CR crun containers | 5.1 | Aug 14 | crun follows rootfs /dev symlink while creating default devices |
| CVE-2026-52791 | FU fuse-overlayfs containers | 2.0 | Jul 29 | fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC) |
| CVE-2026-41163 | BU bubblewrap containers | 7.0 | May 9 | bubblewrap vulnerable to privilege escalation in setuid mode via ptrace |
| CVE-2026-33414 | PO podman containers | 7.8 | Apr 14 | PowerShell Command Injection in Podman HyperV Machine |
| CVE-2026-35406 | AA aardvark-dns containers | 7.5 | Apr 7 | Aardvark-dns has incorrect error handling for malformed tcp packets |
| CVE-2026-30892 | CR crun containers | 7.8 | Mar 25 | Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation |
| CVE-2024-9341 | CO Common Containers | 8.2 | Oct 1 | Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library |
| CVE-2024-8418 | AA Aardvark-dns Containers | 7.5 | Sep 4 | Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service |