Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 448Last 24 hours2,720 in the last 7 days
- 16,912Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 4 | 6 | 0 | 0 | 12 | 29 |
| 2025 | 0 | 2 | 3 | 0 | 0 | 5 | 17 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 12 |
| 2022 | 0 | 3 | 2 | 0 | 0 | 5 | 10 |
| 2021 | 0 | 0 | 3 | 0 | 0 | 3 | 5 |
| 2020 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-47218 | runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandboxcontainerd · runwasi | Critical9.3 |
| CVE-2026-95838 | containerd: Unpack DoS via repeated opaque whiteoutscontainerd · containerd | Medium4.6 |
| CVE-2026-95837 | containerd CRI plugin: Checkpoint restore bypasses destination security contextcontainerd · containerd | High7.8 |
| CVE-2026-107446 | containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an…containerd · overlaybd | Medium6.8 |
| CVE-2026-53493 | Containerd has image-pull DoS via crafted OCI index graph amplificationcontainerd · containerd | Medium6.9 |
| CVE-2026-53495 | containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Servicecontainerd · containerd | Medium6.8 |
| CVE-2026-53489 | containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restorecontainerd · containerd | High8.2 |
| CVE-2026-53492 | containerd CRI checkpoint restore CDI annotation smugglingcontainerd · containerd | High8.4 |
| CVE-2026-50195 | containerd: CRI checkpoint import allows local image tag poisoningcontainerd · containerd | Medium5.6 |
| CVE-2026-47262 | containerd image-triggered runtime DoS via unbounded group parsingcontainerd · containerd | Medium5.3 |
| CVE-2026-46680 | containerd user ID handling bypass allows runAsNonRoot evasioncontainerd · containerd | High7.3 |
| CVE-2026-53488 | containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullcontainerd · containerd | Critical9.4 |
| CVE-2025-64329 | containerd CRI server: Host memory exhaustion through Attach goroutine leakcontainerd · containerd | Medium6.9 |
| CVE-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directorycontainerd · containerd | High7.3 |
| CVE-2025-47291 | containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.containerd · containerd | Medium4.6 |
| CVE-2025-47290 | Containerd vulnerable to host filesystem access during image unpackcontainerd · containerd | High7.6 |
| CVE-2024-40635 | containerd has an integer overflow in User ID handlingcontainerd · containerd | Medium4.6 |
| CVE-2023-25173 | containerd supplementary groups are not set up properlycontainerd · containerd | Medium5.3 |
| CVE-2023-25153 | containerd OCI image importer memory exhaustioncontainerd · containerd | Medium6.2 |
| CVE-2022-23471 | containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leakcontainerd · containerd | Medium5.7 |
| CVE-2022-31030 | containerd CRI plugin: Host memory exhaustion through ExecSynccontainerd · containerd | Medium5.5 |
| CVE-2022-24778 | Incorrect Authorization in imgcryptcontainerd · imgcrypt | High7.5 |
| CVE-2022-23648 | Insecure handling of image volumes in containerd CRI plugincontainerd · containerd | High7.5 |
| CVE-2021-43816 | Improper Preservation of Permissions in containerdcontainerd · containerd | High8.0 |
| CVE-2021-41103 | Insufficiently restricted permissions on plugin directoriescontainerd · containerd | Medium5.9 |
| CVE-2021-32760 | Archive package allows chmod of file outside of unpack target directorycontainerd · containerd | Medium5.0 |
| CVE-2021-21334 | environment variable leakcontainerd · containerd | Medium6.3 |
| CVE-2020-15257 | containerd-shim API Exposed to Host Network Containerscontainerd · containerd | Medium5.2 |
| CVE-2020-15157 | containerd can be coerced into leaking credentials during image pullcontainerd · containerd | Medium6.1 |