Vendor
Containers
12 known vulnerabilities in products by Containers, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-33414 | PowerShell Command Injection in Podman HyperV Machine | 7.8 | |
| High | CVE-2024-8418 | Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service | 7.5 | |
| High | CVE-2025-24965 | .krun_config.json symlink attack creates or overwrites file on the host in crun | — | |
| High | CVE-2024-9341 | Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library | 5.4 | |
| High | CVE-2020-5291 | Privilege escalation in setuid mode via user namespaces in Bubblewrap | 7.2 | |
| High | CVE-2026-41163 | bubblewrap vulnerable to privilege escalation in setuid mode via ptrace | 7.0 | |
| Medium | CVE-2026-44517 | Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive | 6.3 | |
| High | CVE-2026-35406 | Aardvark-dns has incorrect error handling for malformed tcp packets | 6.2 | |
| Medium | CVE-2026-88264 | Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs | 5.6 | |
| Medium | CVE-2026-47766 | crun follows rootfs /dev symlink while creating default devices | — | |
| Low | CVE-2026-52791 | fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open (O_TRUNC) | — | |
| High | CVE-2026-30892 | Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation | — |
Products
| Crun | 4 | 0 |