Vulnerabilities in containerd
29 resultsCVE-2026-47262MEDIUMcontainerd image-triggered runtime DoS via unbounded group parsingEPSS 0.3%CVE-2026-95838MEDIUMcontainerd: Unpack DoS via repeated opaque whiteoutsEPSS 0.2%CVE-2026-53488CRITICALcontainerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullEPSS 0.2%CVE-2026-53489HIGHcontainerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restoreEPSS 0.2%CVE-2025-64329MEDIUMcontainerd CRI server: Host memory exhaustion through Attach goroutine leakEPSS 0.2%CVE-2024-25621HIGHcontainerd affected by a local privilege escalation via wide permissions on CRI directoryEPSS 0.2%CVE-2026-46680HIGHcontainerd user ID handling bypass allows runAsNonRoot evasionEPSS 0.2%CVE-2026-53495MEDIUMcontainerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of ServiceEPSS 0.2%CVE-2026-95837HIGHcontainerd CRI plugin: Checkpoint restore bypasses destination security contextEPSS 0.1%