opencontainers runc vulnerabilities
10 published CVEs name opencontainers runc among the affected products.
- 10Published CVEs10 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-41579
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
opencontainers · runc
Low3.3 - CVE-2025-52881
runc: LSM labels can be bypassed with malicious config using dummy procfs files
opencontainers · runc
High7.3 - CVE-2025-52565
container escape due to /dev/console mount and related races
opencontainers · runc
High8.4 - CVE-2025-31133
runc container escape via "masked path" abuse due to mount race conditions
opencontainers · runc
High7.3 - CVE-2024-45310
runc can be confused to create empty files/directories on the host
opencontainers · runc
Low3.6 - CVE-2024-21626
runc container breakout through process.cwd trickery and leaked fds
opencontainers · runc
High8.6 - CVE-2023-25809
rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc
opencontainers · runc
Medium5.0 - CVE-2023-28642
AppArmor bypass with symlinked /proc in runc
opencontainers · runc
Medium6.1 - CVE-2022-29162
Incorrect Default Permissions in runc
opencontainers · runc
Medium5.9 - CVE-2021-43784
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
opencontainers · runc
Medium6.0