Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Linux Foundation
Containerd

Linux Foundation containerd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Linux Foundation

22 CVEs

Linux Foundation containerd Vulnerabilities

CVE security advisories and vulnerability history for containerd by Linux Foundation.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.0

Avg CVSS

2020–2026

Last updated July 1, 2026

Overview

Linux Foundation containerd has 22 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Severity and exploitation

How the CVSS severity of Linux Foundation containerd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High9

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Linux Foundation containerd's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of Linux Foundation containerd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Linux Foundation containerd version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

Fixed in

2.1.95 CVEs
2.2.55 CVEs
2.3.25 CVEs
1.5.182 CVEs
1.6.182 CVEs
1.7.292 CVEs
1.7.332 CVEs
2.0.102 CVEs
2.0.72 CVEs
2.1.52 CVEs
1.2.141 CVE
1.3.101 CVE
1.3.91 CVE
1.4.111 CVE

Find a version

22 CVEs

Sort

containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVE-2026-53489
Patch
CWE-61
High · CVSS 8.2
EPSS 0.2% (6th pct)2026-07-01
containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-53492
Patch
CWE-20
High · CVSS 8.4
EPSS 0.4% (27th pct)2026-07-01
containerd: CRI checkpoint import allows local image tag poisoning
CVE-2026-50195
Patch
CWE-345
Medium · CVSS 5.6
EPSS 0.3% (22th pct)2026-07-01
containerd image-triggered runtime DoS via unbounded group parsing
CVE-2026-47262
Patch
CWE-400
Medium · CVSS 6.9
EPSS 0.3% (17th pct)2026-07-01
containerd user ID handling bypass allows runAsNonRoot evasion
CVE-2026-46680
Patch
CWE-269
High · CVSS 7.3
EPSS 0.2% (5th pct)2026-07-01
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
CVE-2026-53488
Patch
CWE-20
Critical · CVSS 9.4
EPSS 0.2% (7th pct)2026-07-01
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329
Patch
CWE-401
Medium · CVSS 6.9
EPSS 0.2% (6th pct)2025-11-07
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621
Patch
CWE-279
High · CVSS 7.8
EPSS 0.2% (6th pct)2025-11-06
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
CVE-2025-47291
Patch
CWE-266
Medium · CVSS 4.6
EPSS 0.3% (19th pct)2025-05-21
Containerd vulnerable to host filesystem access during image unpack
CVE-2025-47290
Patch
CWE-367
High · CVSS 7.6
EPSS 0.5% (42th pct)2025-05-20
containerd has an integer overflow in User ID handling
CVE-2024-40635
Patch
CWE-190
High · CVSS 7.8
EPSS 0.3% (21th pct)2025-03-17
Supplementary groups are not set up properly in github.com/containerd/containerd
CVE-2023-25173
Public exploit
Patch
CWE-863
High · CVSS 7.8
EPSS 0.5% (44th pct)2023-02-16
OCI image importer memory exhaustion in github.com/containerd/containerd
CVE-2023-25153
Patch
CWE-770
Medium · CVSS 6.2
EPSS 0.4% (29th pct)2023-02-16
containerd CRI stream server vulnerable to host memory exhaustion via terminal
CVE-2022-23471
Patch
CWE-400
Medium · CVSS 6.5
EPSS 1.1% (65th pct)2022-12-07
containerd CRI plugin: Host memory exhaustion through ExecSync
CVE-2022-31030
Patch
CWE-400
Medium · CVSS 5.5
EPSS 0.4% (30th pct)2022-06-06
containerd CRI plugin: Insecure handling of image volumes
CVE-2022-23648
Public exploit
Patch
CWE-200
High · CVSS 7.5
EPSS 27.4% (98th pct)2022-03-03
Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux
CVE-2021-43816
Public exploit
Patch
CWE-281
Critical · CVSS 9.1
EPSS 1.7% (77th pct)2022-01-05
Insufficiently restricted permissions on plugin directories
CVE-2021-41103
Patch
CWE-22
High · CVSS 7.8
EPSS 0.5% (43th pct)2021-10-04
Archive package allows chmod of file outside of unpack target directory
CVE-2021-32760
Patch
CWE-668
Medium · CVSS 6.3
EPSS 1.6% (75th pct)2021-07-19
containerd environment variable leak
CVE-2021-21334
Patch
CWE-668
Medium · CVSS 6.3
EPSS 2.0% (81th pct)2021-03-10
containerd-shim API Exposed to Host Network Containers
CVE-2020-15257
Patch
CWE-669
Medium · CVSS 5.2
EPSS 3.2% (88th pct)2020-12-01
containerd v1.2.x can be coerced into leaking credentials during image pull
CVE-2020-15157
Patch
CWE-522
Medium · CVSS 6.1
EPSS 2.3% (83th pct)2020-10-16

Common weakness types

The CWE weakness categories most often found in Linux Foundation containerd CVEs. Follow any weakness for its full explanation.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-668Exposure of Resource to Wrong Sphere2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE
CWE-269Improper Privilege Management1 CVE
CWE-279Incorrect Execution-Assigned Permissions1 CVE
CWE-266Incorrect Privilege Assignment1 CVE
CWE-281Improper Preservation of Permissions1 CVE

Disclosure activity by year

How many Linux Foundation containerd CVEs were published each year.

2020

2

2021

3

2022

4

2023

2

2025

5

2026

6

Other Linux Foundation products

Browse vulnerabilities for other products by Linux Foundation.

yocto115 CVEs nats-server36 CVEs pytorch31 CVEs backstage29 CVEs everest29 CVEs magma28 CVEs harbor25 CVEs runc17 CVEs

All Linux Foundation vulnerabilities

Frequently asked questions

Common questions about Linux Foundation containerd vulnerabilities.

How many CVEs does Linux Foundation containerd have?: Linux Foundation containerd has 22 published CVE records since 2020.
How many Linux Foundation containerd CVEs are in CISA KEV?: None of Linux Foundation containerd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Linux Foundation containerd vulnerabilities?: Yes — 3 of Linux Foundation containerd's CVEs have a known public exploit.
Which versions of Linux Foundation containerd are affected?: 74 distinct Linux Foundation containerd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Linux Foundation containerd CVEs?: Linux Foundation containerd's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-668 (Exposure of Resource to Wrong Sphere), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical Linux Foundation containerd vulnerabilities are there?: Linux Foundation containerd has 2 critical and 9 high-severity CVEs.
What is the average severity of Linux Foundation containerd CVEs?: The average CVSS base score across Linux Foundation containerd's scored CVEs is 7.0.

References

All Linux Foundation vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Linux Foundation containerd vulnerabilities

Get an alert for each new Linux Foundation containerd CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

1.4.13

1 CVE

1.4.31 CVE

1.4.41 CVE

1.4.81 CVE

1.5.101 CVE

1.5.131 CVE

1.5.161 CVE

1.5.41 CVE

1.5.71 CVE

1.5.91 CVE

1.6.11 CVE

1.6.121 CVE

1.6.381 CVE

1.6.61 CVE

1.7.271 CVE

1.7.321 CVE

2.0.41 CVE

2.0.51 CVE

2.0.91 CVE

2.2.41 CVE

2.3.11 CVE