Known vulnerabilities in runc
Vendor:
Open Container Initiative
Software:
runc
Software CPE:
cpe:2.3:a:open_container_initiative:runc:*:*:*:*:*:*:*:*
Website:
https://www.opencontainers.org/
Total vulnerabilities:
8
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
1.5.1
1.5.0
1.5.0-rc.3
1.4.3
1.3.6
1.5.0-rc.2
1.4.2
1.3.5
1.5.0-rc.1
1.4.1
1.4.0
1.3.4
1.2.9
1.4.0-rc.3
1.3.3
1.2.8
1.4.0-rc.2
1.3.2
1.4.0-rc.1
1.3.1
1.2.7
1.3.0
1.3.0-rc.2
1.2.6
1.3.0-rc.1
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.15
1.2.0-rc.3
1.1.14
1.2.0-rc.2
1.1.13
1.2.0-rc.1
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.1.0-rc.1
1.0.3
1.0.0-rc93
1.0.0-rc92
1.0.0-rc91
1.0.0-rc90
1.0.2
1.0.1
1.0.0
1.0.0-rc94
1.0.0-rc95
1.0.0-rc10
1.0.0-rc9
1.0.0-rc8
1.0.0-rc7
1.0.0-rc6
1.0.0-rc5
1.0.0-rc4
1.0.0-rc3
1.0.0-rc2
1.0.0-rc1
0.0.4
0.0.3
0.0.2.1
0.0.2
1.0-rc6
1.0-rc5
1.0-rc4
1.0-rc3
1.0-rc2
1.0-rc1
0.1.1
0.1.0
0.0.9
0.0.8
0.0.7
0.0.6
0.0.5
0.0.1
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134680 - UNIX Symbolic Link (Symlink) Following CVE-2026-41579 |
CWE-61 | Low | 1.3.6, 1.4.3, 1.5.0 rc.3 | 16.06.2026 |
SB2026061687 SB2026072513 SB2026073105 and 1 more |
||
| #VU74193 - Improper preservation of permissions CVE-2023-28642 |
CWE-281 | Medium | 1.1.5 | 30.03.2023 |
SB2023033025 SB2023040327 SB2023042614 and 29 more |
||
| #VU74190 - Improper Access Control CVE-2023-27561 |
CWE-284 | Low | 1.1.5 | 30.03.2023 |
SB2023033025 SB2023040327 SB2023042614 and 40 more |
||
| #VU74189 - Improper preservation of permissions CVE-2023-25809 |
CWE-281 | Low | 1.1.5 | 30.03.2023 |
SB2023033025 SB2023040327 SB2023042614 and 23 more |
||
| #VU58522 - Integer overflow CVE-2021-43784 |
CWE-190 | Medium | 1.0.3 | 06.12.2021 |
SB2021120604 SB2021121497 SB2021122314 and 11 more |
||
| #VU53399 - Security Features CVE-2021-30465 |
CWE-254 | Low | 1.0.0 rc95 | 20.05.2021 |
SB2021052013 SB2021052014 SB2021052015 and 33 more |
||
| #VU25847 - Improper Access Control CVE-2019-19921 |
CWE-284 | Low | 1.0.0 rc10 | 10.03.2020 |
SB2020021224 SB2020031004 SB2020031116 and 35 more |
||
| #VU17474 - Permissions, Privileges, and Access Controls CVE-2019-5736 |
CWE-264 | Medium | - | 12.02.2019 | - |