24 matches found
OESA-2026-3719 containerd security update
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...
Astra Linux – Vulnerability in containerd-app
Containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4, and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer were incorrectly treated as a username, resulting in the evasion of the Kubernetes “runAsNonRoot”...
Unity Linux 20.1060e Security Update: containerd (UTSA-2026-107041)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107041 advisory. containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be...
Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-1972)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1972 advisory. containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are...
Important: runfinch-finch
Issue Overview: containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted ima...
github.com/containerd/containerd: containerd: Privilege escalation via incorrect user ID handling
A flaw was found in containerd, an open-source container runtime. Containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. This vulnerability allows a crafted container image to bypass the Kubernetes runAsNonRoot restrictio...
CVE-2026-46680
A flaw was found in containerd, an open-source container runtime. Containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. This vulnerability allows a crafted container image to bypass the Kubernetes runAsNonRoot restrictio...
OPENSUSE-SU-2026:21213-1 Security update for containerd
This update for containerd fixes the following issues Update to 1.7.33: - CVE-2024-25621: overly broad default permission vulnerability bsc1253126. - CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host bsc1253132. - CVE-2026-33186: google.golang.org/grpc: authorization bypas...
AZL-91668 CVE-2026-46680 affecting package moby-containerd-cc for versions less than 1.7.7-16
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an...
CVE-2026-46680: Improper Privilege Management
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an...
PT-2026-42700
Name of the Vulnerable Software and Affected Versions containerd versions prior to 2.3.1 containerd versions prior to 2.2.4 containerd versions prior to 2.0.9 containerd versions prior to 1.7.32 Description An input validation error exists where containers launched with a numeric User directive...
EUVD-2021-12632
Malware in sbrugna...
Improper Access Control
github.com/kubernetes/kubernetes is vulnerable to Improper Access Control. The vulnerability exists in the verifyRunAsNonRoot function of securitycontextwindows.go because the logic for checking user names was case sensitive, which could bypass the Windows containers' runAsNonRoot flag...
CVE-2021-25749
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true...
CVE-2021-25749
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true...
Design/Logic Flaw
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true...
CVE-2021-25749 runAsNonRoot logic bypass for Windows containers
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true...
CVE-2021-25749
CVE-2021-25749 affects Windows workloads in Kubernetes: workloads can run as ContainerAdministrator even when runAsNonRoot is set to true. The entry documents a locally exploitable condition with a CVSS v3.1 base score of 7.8 (HIGH) and a local attack vector with privileges required LOW, no user ...
