opencontainers vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 20232
4. 20242
5. 20253
6. 20261

Newest CVEs

• CVE-2026-41579

  runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

  opencontainers · runc

  Low3.3
• CVE-2025-52881

  runc: LSM labels can be bypassed with malicious config using dummy procfs files

  opencontainers · runc

  High7.3
• CVE-2025-52565

  container escape due to /dev/console mount and related races

  opencontainers · runc

  High8.4
• CVE-2025-31133

  runc container escape via "masked path" abuse due to mount race conditions

  opencontainers · runc

  High7.3
• CVE-2024-45310

  runc can be confused to create empty files/directories on the host

  opencontainers · runc

  Low3.6
• CVE-2024-21626

  runc container breakout through process.cwd trickery and leaked fds

  opencontainers · runc

  High8.6
• CVE-2023-25809

  rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

  opencontainers · runc

  Medium5.0
• CVE-2023-28642

  AppArmor bypass with symlinked /proc in runc

  opencontainers · runc

  Medium6.1
• CVE-2022-29162

  Incorrect Default Permissions in runc

  opencontainers · runc

  Medium5.9
• CVE-2021-43784

  Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

  opencontainers · runc

  Medium6.0