Priority HIGH 82
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as r…
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.98452 · Published 2019-02-11 · Partial fix CWE-78
Priority HIGH 72
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.18923 · Published 2024-01-31 · Partial fix · 1.1.12 CWE-403
Priority MEDIUM 49
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.10245 · Published 2021-05-27 · Partial fix · 1.0.0-rc95 CWE-362
Priority MEDIUM 40
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04409 · Published 2019-09-25 · Partial fix · 1.0.0-rc8.0.20190930145003-cad42f6e0932, 1.3.1-0.20190929122143-5215b1806f52 CWE-863
Priority LOW 38
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00811 · Published 2025-11-06 · Fixed in 1.2.8, 1.3.3 +1 CWE-363
Priority LOW 37
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01245 · Published 2025-11-06 · Fixed in 1.2.8, 1.3.3 +1 CWE-363
Priority LOW 35
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00801 · Published 2025-11-06 · Partial fix · 1.2.8, 1.13.0 +2 CWE-363
Priority LOW 34
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00343 · Published 2023-03-29 · Partial fix · 1.1.5 CWE-281
Priority LOW 34
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0039 · Published 2022-05-17 · Partial fix · 1.1.2 CWE-276
Priority LOW 34
libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00388 · Published 2016-06-01 · Partial fix · 0.1.0 CWE-264
Priority LOW 33
runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00448 · Published 2023-03-03 · Partial fix · 1.1.5 CWE-706
Priority LOW 31
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2020-02-12 · Partial fix · 1.0.0-rc9.0.20200122160610-2fc03cc11c77 CWE-706
Priority LOW 30
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
CVSS 3.1MEDIUM 6.0· Network · Low privileges · No interaction · EPSS 0.01803 · Published 2021-12-06 · Partial fix · 1.0.3 CWE-190
Priority LOW 28
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2023-03-29 · Partial fix · 1.1.5 CWE-281
Priority LOW 27
Moby is an open-source project created by Docker to enable and accelerate software containerization.
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.00492 · Published 2022-03-24 · Partial fix · 20.10.14 CWE-732
Priority LOW 17
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 3.1LOW 3.6· Local · No auth · User interaction · EPSS 0.00317 · Published 2024-09-03 · Partial fix · 1.1.14, 1.2.0-rc.3 CWE-363
Priority LOW 15
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00186 · Published 2026-07-01 · Partial fix · 1.3.6, 1.4.3 +1 CWE-61
THREATIST.IORead the docs