CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18

CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18. A patched version of the package is available...

CLEANSTART-2026-HA58928 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-RY70674 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-LO42693 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-DF92501 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-CQ05978 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-VP76604 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-ON16663 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

AZL-107715 CVE-2026-97032 affecting package moby-containerd-cc 1.7.7-17

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107718 CVE-2026-78669 affecting package moby-containerd-cc 1.7.7-17

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107721 CVE-2026-78660 affecting package moby-containerd-cc 1.7.7-17

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107727 CVE-2026-78659 affecting package moby-containerd-cc 1.7.7-17

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107724 CVE-2026-78663 affecting package moby-containerd-cc 1.7.7-17

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

EUVD-2026-94691

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

CVE-2026-107446

The containerd overlaybd component (versions through 1.0.18 ) contains an integer overflow vulnerability in the do_load_index (LSMT index loading) function. This flaw occurs during the processing of index_bytes, potentially leading to an out-of-bounds heap access . The vulnerability can be trigge...

CVE-2026-107446: Integer Overflow or Wraparound

containerd overlaybd through 1.0.18 has a doloadindex LSMT index loading integer overflow and resultant out-of-bounds heap access for indexbytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3968)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...