Product by Go
Github.com/containerd/containerd/v2
12 known vulnerabilities in Github.com/containerd/containerd/v2 (Go), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-50195 | containerd: CRI checkpoint import allows local image tag poisoning | 9.9 | |
| Medium | CVE-2026-53493 | Containerd has image-pull DoS via crafted OCI index graph amplification | — | |
| High | CVE-2026-95837 | containerd CRI plugin: Checkpoint restore bypasses destination security context | 7.8 | |
| High | CVE-2025-47290 | Containerd vulnerable to host filesystem access during image unpack | 5.9 | |
| High | CVE-2026-53489 | containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore | 6.5 | |
| High | CVE-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directory | 7.3 | |
| High | CVE-2026-46680 | containerd user ID handling bypass allows runAsNonRoot evasion | 7.8 | |
| Medium | CVE-2026-95838 | containerd: Unpack DoS via repeated opaque whiteouts | — | |
| High | CVE-2025-47291 | Containerd: Incorrect Privilege Assignment | 7.5 | |
| Medium | CVE-2026-47262 | containerd image-triggered runtime DoS via unbounded group parsing | 5.5 | |
| Medium | CVE-2025-64329 | containerd CRI server: Host memory exhaustion through Attach goroutine leak | 5.5 | |
| High | CVE-2024-40635 | containerd has an integer overflow in User ID handling | 4.6 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,