containers vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20251
3. 20268

Newest CVEs

• CVE-2026-88264

  Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

  containers · crun

  Medium5.6
• CVE-2026-44517

  Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

  containers · buildah

  Medium6.3
• CVE-2026-47766

  crun follows rootfs /dev symlink while creating default devices

  containers · crun

  Medium5.1
• CVE-2026-52791

  fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

  containers · fuse-overlayfs

  Low2.0
• CVE-2026-41163

  bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

  containers · bubblewrap

  High8.7
• CVE-2026-33414

  PowerShell Command Injection in Podman HyperV Machine

  containers · podman

  Medium4.0
• CVE-2026-35406

  Aardvark-dns has incorrect error handling for malformed tcp packets

  containers · aardvark-dns

  Medium6.2
• CVE-2026-30892

  Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

  containers · crun

  None0.0
• CVE-2025-24965

  .krun_config.json symlink attack creates or overwrites file on the host in crun

  containers · crun

  High8.5
• CVE-2020-5291

  Privilege escalation in setuid mode via user namespaces in Bubblewrap

  containers · bubblewrap

  High7.2