CVE Tools
Track your stack

Containerd

29 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Containerd, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Containerd CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Containerd CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-031
2025-040
2025-052
2025-060
2025-070
2025-080
2025-090
2025-100
2025-112
2025-120
2026-010
2026-021
2026-030
2026-040
2026-050
2026-060
2026-076
2026-080
2026-092
2026-102
2026-110

Severity

How the 29 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical28%
  • High831%
  • Medium1558%
  • Low14%

Latest CVEs

The 15 most recently published vulnerabilities affecting Containerd.

  1. CVE-2026-95838containerd: Unpack DoS via repeated opaque whiteouts—
  2. CVE-2026-95837containerd CRI plugin: Checkpoint restore bypasses destination security context7.8
  3. CVE-2026-53493Containerd has image-pull DoS via crafted OCI index graph amplification—
  4. CVE-2026-53495containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service—
  5. CVE-2026-53489containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore6.5
  6. CVE-2026-53492containerd CRI checkpoint restore CDI annotation smuggling9.6
  7. CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoning9.9
  8. CVE-2026-47262containerd image-triggered runtime DoS via unbounded group parsing5.5
  9. CVE-2026-46680containerd user ID handling bypass allows runAsNonRoot evasion7.8
  10. CVE-2026-53488containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull8.8
  11. CVE-2025-47911Quadratic parsing complexity in golang.org/x/net/html5.3
  12. CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leak5.5
  13. CVE-2024-25621containerd affected by a local privilege escalation via wide permissions on CRI directory7.3
  14. CVE-2025-47291containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.7.5
  15. CVE-2025-47290Containerd vulnerable to host filesystem access during image unpack5.9

Product grouping is registry-driven, with AI assist and human review. How it works