How many Linux Foundation containerd CVEs are in CISA KEV?

None of Linux Foundation containerd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Linux Foundation containerd are affected?

74 distinct Linux Foundation containerd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Linux Foundation containerd CVEs?

Linux Foundation containerd's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-668 (Exposure of Resource to Wrong Sphere), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical Linux Foundation containerd vulnerabilities are there?

Linux Foundation containerd has 2 critical and 9 high-severity CVEs.

What is the average severity of Linux Foundation containerd CVEs?

The average CVSS base score across Linux Foundation containerd's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Linux Foundation

22 CVEs

Linux Foundation containerd Vulnerabilities

Name: Linux Foundation containerd vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for containerd by Linux Foundation.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.0

Avg CVSS

2020–2026

Last updated July 1, 2026

Overview

Linux Foundation containerd has 22 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Linux Foundation containerd, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Linux Foundation containerd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High9

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Linux Foundation containerd's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of Linux Foundation containerd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Linux Foundation containerd version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.1.0 <= v < 2.1.95 CVEs
2.2.0 <= v < 2.2.55 CVEs
2.3.0 <= v < 2.3.25 CVEs
< 1.5.182 CVEs
< 1.7.292 CVEs
1.6.0 <= v < 1.6.182 CVEs
1.7.0 <= v < 1.7.332 CVEs
2.0.0 <= v < 2.0.102 CVEs
2.0.0 <= v < 2.0.72 CVEs
2.1.0 <= v < 2.1.52 CVEs
2.2.0 <= v <= 2.2.02 CVEs
< 1.3.101 CVE
< 1.3.91 CVE
< 1.4.111 CVE
< 1.4.131 CVE
< 1.4.81 CVE
< 1.5.131 CVE
< 1.5.161 CVE
< 1.6.381 CVE
1.2.0 <= v < 1.2.141 CVE
1.3.0 <= v <= 1.3.01 CVE
1.4.0 <= v < 1.4.31 CVE
1.4.0 <= v < 1.4.41 CVE
1.5.0 <= v < 1.5.101 CVE
1.5.0 <= v < 1.5.41 CVE
1.5.0 <= v < 1.5.71 CVE
1.5.0 <= v <= 1.5.01 CVE
1.5.1 <= v < 1.5.91 CVE
1.6.0 <= v < 1.6.11 CVE
1.6.0 <= v < 1.6.121 CVE
1.6.0 <= v < 1.6.61 CVE
1.7.0 <= v < 1.7.271 CVE
1.7.27 <= v < 1.7.321 CVE
2.0.0 <= v < 2.0.41 CVE
2.0.1 <= v < 2.0.51 CVE
2.0.4 <= v < 2.0.91 CVE
2.1.0 <= v < 2.2.41 CVE
2.1.0 <= v <= 2.1.01 CVE
2.3.0 <= v < 2.3.11 CVE

Fixed in

2.1.95 CVEs
2.2.55 CVEs
2.3.25 CVEs
1.5.182 CVEs
1.6.182 CVEs
1.7.292 CVEs
1.7.332 CVEs
2.0.102 CVEs
2.0.72 CVEs
2.1.52 CVEs
1.2.141 CVE
1.3.101 CVE
1.3.91 CVE
1.4.111 CVE

Find a version

22 CVEs

Sort

containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVE-2026-53489
Patch
CWE-61
High · CVSS 8.2
EPSS 0.2% (11th pct)2026-07-01
containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-53492
Patch
CWE-20
High · CVSS 8.4
EPSS 0.4% (33th pct)2026-07-01
containerd: CRI checkpoint import allows local image tag poisoning
CVE-2026-50195
Patch
CWE-345
Medium · CVSS 5.6
EPSS 0.4% (28th pct)2026-07-01
containerd image-triggered runtime DoS via unbounded group parsing
CVE-2026-47262
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.3% (24th pct)2026-07-01
containerd user ID handling bypass allows runAsNonRoot evasion
CVE-2026-46680
Patch
CWE-269
High · CVSS 7.3
EPSS 0.2% (13th pct)2026-07-01
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
CVE-2026-53488
Patch
CWE-20
Critical · CVSS 9.4
EPSS 0.2% (10th pct)2026-07-01
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329
Patch
CWE-401
Medium · CVSS 6.9
EPSS 0.2% (6th pct)2025-11-07
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621
Patch
CWE-279
High · CVSS 7.8
EPSS 0.2% (5th pct)2025-11-06
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
CVE-2025-47291
Patch
CWE-266
Medium · CVSS 4.6
EPSS 0.2% (15th pct)2025-05-21
Containerd vulnerable to host filesystem access during image unpack
CVE-2025-47290
Patch
CWE-367
High · CVSS 7.6
EPSS 0.4% (35th pct)2025-05-20
High vulnerability · 2025-03-17
CVE-2024-40635
Patch
CWE-190
High · CVSS 7.8
EPSS 0.3% (19th pct)2025-03-17
High vulnerability · 2023-02-16
CVE-2023-25173
Public exploit
Patch
CWE-863
High · CVSS 7.8
EPSS 0.5% (42th pct)2023-02-16
Medium vulnerability · 2023-02-16
CVE-2023-25153
Patch
CWE-770
Medium · CVSS 6.2
EPSS 0.4% (29th pct)2023-02-16
Medium vulnerability · 2022-12-07
CVE-2022-23471
Patch
CWE-400
Medium · CVSS 6.5
EPSS 1.0% (60th pct)2022-12-07
Medium vulnerability · 2022-06-06
CVE-2022-31030
Patch
CWE-400
Medium · CVSS 5.5
EPSS 0.4% (30th pct)2022-06-06
High vulnerability · 2022-03-03
CVE-2022-23648
Public exploit
Patch
CWE-200
High · CVSS 7.5
EPSS 27.4% (98th pct)2022-03-03
Critical vulnerability · 2022-01-05
CVE-2021-43816
Public exploit
Patch
CWE-281
Critical · CVSS 9.1
EPSS 1.7% (75th pct)2022-01-05
High vulnerability · 2021-10-04
CVE-2021-41103
Patch
CWE-22
High · CVSS 7.8
EPSS 0.5% (38th pct)2021-10-04
Medium vulnerability · 2021-07-19
CVE-2021-32760
Patch
CWE-668
Medium · CVSS 6.3
EPSS 1.6% (73th pct)2021-07-19
Medium vulnerability · 2021-03-10
CVE-2021-21334
Patch
CWE-668
Medium · CVSS 6.3
EPSS 2.0% (79th pct)2021-03-10
Medium vulnerability · 2020-12-01
CVE-2020-15257
Patch
CWE-669
Medium · CVSS 5.2
EPSS 3.2% (87th pct)2020-12-01
Medium vulnerability · 2020-10-16
CVE-2020-15157
Patch
CWE-522
Medium · CVSS 6.1
EPSS 2.2% (81th pct)2020-10-16

Common weakness types

The CWE weakness categories most often found in Linux Foundation containerd CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Linux Foundation containerd CVEs were published each year.

2020

2

2021

3

2022

4

2023

2

2025

5

2026

6

Other Linux Foundation products

Browse vulnerabilities for other products by Linux Foundation.

yocto115 CVEs nats-server36 CVEs pytorch31 CVEs everest29 CVEs harbor23 CVEs magma22 CVEs runc17 CVEs iot-yocto15 CVEs

All Linux Foundation vulnerabilities

Frequently asked questions

Common questions about Linux Foundation containerd vulnerabilities.

How many CVEs does Linux Foundation containerd have?: Linux Foundation containerd has 22 published CVE records since 2020.
How many Linux Foundation containerd CVEs are in CISA KEV?: None of Linux Foundation containerd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Linux Foundation containerd vulnerabilities?: Yes — 3 of Linux Foundation containerd's CVEs have a known public exploit.
Which versions of Linux Foundation containerd are affected?: 74 distinct Linux Foundation containerd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Linux Foundation containerd CVEs?: Linux Foundation containerd's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-668 (Exposure of Resource to Wrong Sphere), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical Linux Foundation containerd vulnerabilities are there?: Linux Foundation containerd has 2 critical and 9 high-severity CVEs.
What is the average severity of Linux Foundation containerd CVEs?: The average CVSS base score across Linux Foundation containerd's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Linux Foundation containerd vulnerabilities

Monitor new Linux Foundation containerd vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

1.4.13

1 CVE

1.4.31 CVE

1.4.41 CVE

1.4.81 CVE

1.5.101 CVE

1.5.131 CVE

1.5.161 CVE

1.5.41 CVE

1.5.71 CVE

1.5.91 CVE

1.6.11 CVE

1.6.121 CVE

1.6.381 CVE

1.6.61 CVE

1.7.271 CVE

1.7.321 CVE

2.0.41 CVE

2.0.51 CVE

2.0.91 CVE

2.2.41 CVE

2.3.11 CVE