Login Request a demo
CO
Product
containerd
by containerd · last CVE Oct 12, 2026
15
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 2High 6Medium 7Low 0
Severity
All severities15Critical2High6Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add containerd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53488
8.8
0%
Jul 1
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
Affected: < 1.7.33; >= 2.0.0, < 2.0.10; >= 2.1.0, < 2.1.9; >= 2.2.0, < 2.2.5; >= 2.3.0, < 2.3.2
CVE-2026-95837
7.8
0%
Oct 12
containerd CRI plugin: Checkpoint restore bypasses destination security context
Affected: >= 2.1.0, < 2.2.7; >= 2.3.0, < 2.3.4
CVE-2026-46680
7.8
0%
Jul 1
containerd user ID handling bypass allows runAsNonRoot evasion
Affected: < 1.7.32; >= 2.0.4, < 2.0.9; >= 2.0.10, < 2.2.4; >= 2.2.5, < 2.3.1
CVE-2024-25621
7.8
0%
Nov 6
containerd affected by a local privilege escalation via wide permissions on CRI directory
Affected: < 1.7.29; >= 2.0.0-beta.0, < 2.0.7; >= 2.1.0-beta.0, < 2.1.5; >= 2.2.0-beta.0, < 2.2.0
CVE-2024-40635
7.8
0%
Mar 17
containerd has an integer overflow in User ID handling
Affected: < 1.6.38; >= 1.7.0-beta.0, < 1.7.27; >= 2.0.0-beta.0, < 2.0.4
CVE-2025-47291
7.5
0%
May 21
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
Affected: >= 2.0.1, < 2.0.5
Showing 6