Сообщество свободного программного обеспечения runc

Name: Сообщество свободного программного обеспечения runc
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical8high0medium1low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-5736US	high8.6	98.5% (100th)	Exploit	no fix	2019-02-11	6 versions
CVE-2024-21626US	high8.6	18.9% (97th)	Exploit	no fix	2024-01-31	≤ 1.1.12
CVE-2025-31133US	high7.8	1.24% (69th)	Exploit	no fix	2025-11-06	3 versions
CVE-2025-52881US	high7.5	0.80% (56th)	Exploit	no fix	2025-11-06	3 versions
CVE-2021-30465US	high8.5	10.2% (96th)	—	no fix	2021-05-27	≤ 1.0.0-rc95
CVE-2019-16884US	high7.5OT elevated	4.41% (91st)	—	no fix	2019-09-25	≤ 1.0.0-rc8
CVE-2025-52565US	high7.5	0.81% (57th)	—	no fix	2025-11-06	3 versions
CVE-2016-3697US	high7.8	0.39% (33rd)	—	no fix	2016-06-01	≤ 0.1.0
CVE-2024-45310US	low3.6	0.32% (25th)	—	no fix	2024-09-03	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-363Race Condition Enabling Link Following4 CVEs
CWE-61UNIX Symbolic Link (Symlink) Following4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-216DEPRECATED: Containment Errors (Container Errors)1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.