containerd vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20213
3. 20225
4. 20232
5. 20255
6. 202612

Newest CVEs

• CVE-2026-47218

  runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

  containerd · runwasi

  Critical9.3
• CVE-2026-95838

  containerd: Unpack DoS via repeated opaque whiteouts

  containerd · containerd

  Medium4.6
• CVE-2026-95837

  containerd CRI plugin: Checkpoint restore bypasses destination security context

  containerd · containerd

  High7.8
• CVE-2026-107446

  containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an…

  containerd · overlaybd

  Medium6.8
• CVE-2026-53493

  Containerd has image-pull DoS via crafted OCI index graph amplification

  containerd · containerd

  Medium6.9
• CVE-2026-53495

  containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

  containerd · containerd

  Medium6.8
• CVE-2026-53489

  containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

  containerd · containerd

  High8.2
• CVE-2026-53492

  containerd CRI checkpoint restore CDI annotation smuggling

  containerd · containerd

  High8.4
• CVE-2026-50195

  containerd: CRI checkpoint import allows local image tag poisoning

  containerd · containerd

  Medium5.6
• CVE-2026-47262

  containerd image-triggered runtime DoS via unbounded group parsing

  containerd · containerd

  Medium5.3