Known vulnerabilities in runc

Software: runc
Software CPE: cpe:2.3:a:linux_foundation:runc:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting runc runc is affected by 7 known vulnerabilities: 1 high, 1 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118106 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52565
CWE-61 Low
No
No
1.2.8, 1.3.3, 1.4.0 rc.3 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 38 more
#VU118105 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52881
CWE-61 Low
No
No
1.2.8, 1.3.3, 1.4.0 rc.3 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 62 more
#VU118104 - UNIX Symbolic Link (Symlink) Following
CVE-2025-31133
CWE-61 Low
Available
No
1.2.8, 1.3.3, 1.4.0 rc.3 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 34 more
#VU96712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45310
CWE-362 Low
No
No
1.1.14, 1.2.0 rc.3 03.09.2024 SB2024090315
SB2024091283
SB2024091416
and 18 more
#VU85991 - Security Features
CVE-2024-21626
CWE-254 High
Available
No
1.1.12 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162
CWE-264 Medium
No
No
1.1.2 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU22482 - Permissions, Privileges, and Access Controls
CVE-2019-16884
CWE-264 Low
No
No
1.0.0 rc9 01.11.2019 SB2019092516
SB2019092517
SB2019110111
and 19 more