[ Vendor · 5 CVEs ]
containerd
CVEs affecting containerd published in the last 30 days, plus any containerd CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-47218 | 15 Oct 2026 | CVSS 9.3 | containerd runwasirunwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled… | |
| CVE-2026-95837 | 12 Oct 2026 | CVSS 7.8 | containerd CRI plugin: Checkpoint restore bypasses destination security contextcontainerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable… | Fix |
| CVE-2026-95838 | 12 Oct 2026 | CVSS 4.6 | containerd: Unpack DoS via repeated opaque whiteoutscontainerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses… | Fix |
| CVE-2026-107446 | 8 Oct 2026 | CVSS 6.8 | containerd overlaybdcontainerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for… | |
| CVE-2026-53493 | 25 Sep 2026 | CVSS 6.9 | Containerd has image-pull DoS via crafted OCI index graph amplificationcontainerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very… | Fix |