CVE WATCH / VULNERABILITY DETAIL

CVE-2026-95837

HIGHCVSS 7.8NVD feed

Published 12 October 2026 · tracked since 13 October 2026

Description

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a con

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools