Runc
Vendor:
First CVE: Jun 1, 2016 · Active for 10 years
17
Total CVEs
More Total CVEs than 93% of tracked products
1.9
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Runc over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 1, 2016
10 years ago
Most Recent CVE
Jul 1, 2026
23 days ago
CVE Severity & Scoring
Runc17 CVEs
12%
18%
71%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local14 (82.4%)
Network3 (17.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (58.8%)
High7 (41.2%)
Unknown0 (0.0%)
User Interaction
None11 (64.7%)
Unknown0 (0.0%)
Required6 (35.3%)
Privileges Required
Low11 (64.7%)
High0 (0.0%)
None6 (35.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-5736HIGH runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveragi | Feb 11, 2019 | 8.6 | 91 | NO | YES |
CVE-2024-21626HIGH runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker | Jan 31, 2024 | 8.6 | 54 | NO | YES |
CVE-2025-31133HIGH runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, r | Nov 6, 2025 | 7.8 | 31 | NO | NO |
CVE-2025-52881HIGH runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting wri | Nov 6, 2025 | 7.5 | 30 | NO | NO |
CVE-2025-52565HIGH runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0- | Nov 6, 2025 | 7.5 | 30 | NO | NO |
CVE-2021-30465HIGH runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a f | May 27, 2021 | 8.5 | 30 | NO | NO |
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when set | Jul 1, 2026 | 3.3 | 26 | NO | NO |
CVE-2022-29162HIGH runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created p | May 17, 2022 | 7.8 | 26 | NO | NO |
CVE-2019-16884HIGH runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount ta | Sep 25, 2019 | 7.5 | 26 | NO | NO |
CVE-2023-28642HIGH runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked | Mar 29, 2023 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
11.8% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
5.9% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Runc
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.5.0 | 1 | 3.3 | 0.2% | 0 | 0 |
| 1.4.0 | 3 | 7.6 | 0.6% | 0 | 0 |
| 1.2.0 | 1 | 3.6 | 0.3% | 0 | 0 |
| 1.0.0 | 5 | 7.8 | 14.4% | 0 | 1 |