Product by Opencontainers
Runc
10 known vulnerabilities in Runc (Opencontainers), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-21626 | runc container breakout through process.cwd trickery and leaked fds | 8.6 | |
| High | CVE-2025-31133 | runc container escape via "masked path" abuse due to mount race conditions | 7.8 | |
| High | CVE-2025-52565 | container escape due to /dev/console mount and related races | 7.5 | |
| Medium | CVE-2021-43784 | Opencontainers Runc: Integer Overflow or Wraparound | 6.0 | |
| High | CVE-2025-52881 | runc: LSM labels can be bypassed with malicious config using dummy procfs files | 7.5 | |
| High | CVE-2022-29162 | Incorrect Default Permissions in runc | 5.9 | |
| High | CVE-2023-28642 | AppArmor bypass with symlinked /proc in runc | 6.1 | |
| Low | CVE-2026-41579 | runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations | 3.3 | |
| Medium | CVE-2023-25809 | rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc | 5.0 | |
| Low | CVE-2024-45310 | runc can be confused to create empty files/directories on the host | 3.6 |