LI
Vendor
Linuxcontainers
32
CVEs
0
On KEV
0
New 30D
Products
IN9.9
Incus
Linuxcontainers
18 CVEs0 on KEV0 new
LX9.1
Lxc
Linuxcontainers
12 CVEs0 on KEV0 new
CG–
Cgmanager
Linuxcontainers
1 CVEs0 on KEV0 new
LX8.1
Lxd
Linuxcontainers
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41685 | IN Incus Linuxcontainers | 4.3 | May 7 | Incus: Unbounded binary import disk exhaustion |
| CVE-2026-41684 | IN Incus Linuxcontainers | 6.5 | May 7 | Incus: Nil Dereferences on Restore via Malformed YAML |
| CVE-2026-41648 | IN Incus Linuxcontainers | 5.0 | May 7 | Incus: Unbounded YAML Metadata Decode via Parsing |
| CVE-2026-41647 | IN Incus Linuxcontainers | 6.5 | May 7 | Incus: Nil-Pointer Dereference via S3 Bucket Import |
| CVE-2026-40251 | IN Incus Linuxcontainers | 6.5 | May 6 | Incus out-of-bounds panic in snapshot metadata handling allows denial of service |
| CVE-2026-40243 | IN Incus Linuxcontainers | 4.8 | May 6 | Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation |
| CVE-2026-40197 | IN Incus Linuxcontainers | 6.5 | May 6 | Incus nil-pointer dereference in custom volume import allows denial of service |
| CVE-2026-40195 | IN Incus Linuxcontainers | 6.5 | May 6 | Incus nil-pointer dereference in storage bucket import allows denial of service |
| CVE-2026-39402 | LX Lxc Linuxcontainers | 6.5 | May 5 | lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion |
| CVE-2026-35527 | IN Incus Linuxcontainers | 5.0 | May 5 | Incus blind SSRF via image import preflight HEAD request |
| CVE-2026-33945 | IN Incus Linuxcontainers | 9.6 | Mar 26 | Abitrary file write through systemd-creds option |
| CVE-2026-33898 | IN Incus Linuxcontainers | 8.8 | Mar 26 | Local Incus UI web server vulnerable to nuthentication bypass |
| CVE-2026-33897 | IN Incus Linuxcontainers | 9.9 | Mar 26 | Incus vulnerable to arbitrary file read and write through pongo templates |
| CVE-2026-33743 | IN Incus Linuxcontainers | 6.5 | Mar 26 | Incus vulnerable to denial of source through crafted bucket backup file |
| CVE-2026-33711 | IN Incus Linuxcontainers | 7.8 | Mar 26 | Incus vulnerable to local privilege escalation through VM screenshot path |
| CVE-2026-33542 | IN Incus Linuxcontainers | 4.8 | Mar 26 | Incus does not verify combined fingerprint when downloading images from simplestreams servers |
| CVE-2026-23954 | IN Incus Linuxcontainers | 8.7 | Jan 22 | Incus is a system container and virtual machine manager |
| CVE-2026-23953 | IN Incus Linuxcontainers | 8.7 | Jan 22 | Incus is a system container and virtual machine manager |
| CVE-2025-64507 | IN Incus Linuxcontainers | 7.8 | Nov 10 | Incus is a system container and virtual machine manager |
| CVE-2022-47952 | LX Lxc Linuxcontainers | 3.3 | Jan 1 | lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to… |
| CVE-2017-18641 | LX Lxc Linuxcontainers | 8.1 | Feb 10 | In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers |
| CVE-2015-1340 | LX Lxd Linuxcontainers | 8.1 | Apr 22 | LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function |
| CVE-2019-5736 | LX Lxc Linuxcontainers | 8.6 | Feb 11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by… |
| CVE-2018-6556 | LX Lxc Linuxcontainers | 3.3 | Aug 10 | The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files |
| CVE-2016-8649 | LX Lxc Linuxcontainers | 9.1 | May 1 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the… |
| CVE-2017-5985 | LX Lxc Linuxcontainers | 3.3 | Mar 14 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by… |
| CVE-2016-10124 | LX Lxc Linuxcontainers | 8.6 | Jan 9 | An issue was discovered in Linux Containers (LXC) before 2016-02-22 |
| CVE-2015-1335 | LX Lxc Linuxcontainers | – | Oct 1 | lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind… |
| CVE-2015-1334 | LX Lxc Linuxcontainers | – | Aug 12 | attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc… |
| CVE-2015-1331 | LX Lxc Linuxcontainers | – | Aug 12 | lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/* |
| CVE-2014-1425 | CG Cgmanager Linuxcontainers | – | Jan 7 | cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgroups via unspecified vectors |
| CVE-2013-6441 | LX Lxc Linuxcontainers | – | Feb 14 | The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by… |