Known vulnerabilities in containerd

Vendor: Fedoraproject
Software: containerd
Software CPE: cpe:2.3:o:fedoraproject:containerd:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 46
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting containerd containerd is affected by 46 known vulnerabilities: 2 high, 25 medium, 19 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138768 - Allocation of Resources Without Limits or Throttling
CVE-2026-35469		 CWE-770 Low
No
No
 2.3.2-1.fc45 20.07.2026 SB20260720353
SB20260720355
SB20260720356
and 42 more
#VU134889 - Resource exhaustion
CVE-2026-47262		 CWE-400 Low
No
No
 2.3.2-1.fc45 19.06.2026 SB2026061902
SB2026070290
SB2026070980
and 11 more
#VU134888 - UNIX Symbolic Link (Symlink) Following
CVE-2026-53489		 CWE-61 Medium
No
No
 2.3.2-1.fc45 19.06.2026 SB2026061902
SB20260720365
#VU134887 - Insufficient Verification of Data Authenticity
CVE-2026-50195		 CWE-345 Low
No
No
 2.3.2-1.fc45 19.06.2026 SB2026061902
SB20260720365
#VU134886 - Improper input validation
CVE-2026-53488		 CWE-20 High
No
No
 2.3.2-1.fc45 19.06.2026 SB2026061902
SB2026070980
SB2026070981
and 6 more
#VU134885 - Incorrect Authorization
CVE-2026-53492		 CWE-863 Low
No
No
 2.3.2-1.fc45 19.06.2026 SB2026061902
SB2026070290
SB20260720365
and 2 more
#VU125945 - Improper input validation
CVE-2026-34986		 CWE-20 Medium
No
No
 2.3.2-1.fc45 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 73 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42, 2.1.5-1.fc43 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118189 - Improper input validation
CVE-2025-58188		 CWE-20 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 110 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42, 2.1.5-1.fc43 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 112 more
#VU118184 - Resource exhaustion
CVE-2025-61723		 CWE-400 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42, 2.1.5-1.fc43 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 118 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189		 CWE-116 Low
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42, 2.1.5-1.fc43 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 120 more
#VU118179 - Resource exhaustion
CVE-2025-61725		 CWE-400 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42, 2.1.5-1.fc43 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 76 more
#VU116686 - Protection Mechanism Failure
CVE-2025-47910		 CWE-693 Medium
No
No
 1.7.29-1.fc41, 2.0.7-1.fc42 07.10.2025 SB2025100755
SB2025100756
SB2025100757
and 88 more
#VU114079 - Improper input validation
CVE-2025-47906		 CWE-20 Low
No
No
 2.0.7-1.fc42 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 130 more
#VU109601 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-47290		 CWE-367 High
No
No
 2.1.1-1.fc43 21.05.2025 SB20250521122
SB20250521127
SB2026011803
#VU107889 - Improper input validation
CVE-2025-22872		 CWE-20 Low
No
No
 2.1.1-1.fc43 23.04.2025 SB2025042357
SB2025042413
SB2025042414
and 51 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 1.7.29-1.fc41 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105799 - Integer overflow
CVE-2024-40635		 CWE-190 Low
No
No
 1.7.27-1.fc41 17.03.2025 SB20250317125
SB2025031862
SB2025032001
and 19 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 1.6.23-1.fc37, 1.6.23-1.fc38 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more


Showing elements 1 - 20 out of 46