What is the CVSS score of CVE-2024-21626?

CVE-2024-21626 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 5.5%.

Which versions of Runc are affected by CVE-2024-21626?

Alpine Linux: runc fixed in 1.1.12-r0. A patch is available.

Is there a public PoC exploit available for CVE-2024-21626?

Yes, a public proof-of-concept exploit is available for CVE-2024-21626. Prioritise patching immediately. EPSS: 5.5%.

Is there a patch available for CVE-2024-21626?

Yes, a patch is available for CVE-2024-21626. Update the affected software to the latest version immediately.

Runc CVE-2024-21626

HIGH

Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak') (CWE-403)

N/A vendor:alpine

Information Disclosure Runc Fedora

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVSS changed

Jun 25, 2026 - 19:22 NVD

8.6 (HIGH)

CVE Published

May 27, 2026 - 22:33 nvd

MEDIUM

DescriptionNVD

Alpine Linux: runc fixed in 1.1.12-r0

Analysis

Alpine Linux: runc fixed in 1.1.12-r0

More in Runc

View all

CVE-2025-52565 HIGH This Week POC

8.4 Nov 06

runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 8.4

CVE-2019-16884 HIGH This Week POC

7.5 Sep 25

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass beca

CVE-2025-52881 HIGH This Week POC

7.3 Nov 06

runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 7.3

CVE-2025-31133 HIGH This Week POC

7.3 Nov 06

runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 7.3

CVE-2023-27561 HIGH This Week POC

7.0 Mar 03

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linu

CVE-2023-25809 MEDIUM This Month POC

6.3 Mar 29

runc is a CLI tool for spawning and running containers according to the OCI specification. Rated medium severity (CVSS 6

CVE-2021-43784 MEDIUM This Month POC

5.0 Dec 06

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. Rated medium severit

CVE-2021-30465 HIGH This Week

8.5 May 27

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. Rated high severity (CVSS 8.5), t

CVE-2016-3697 HIGH This Week

7.8 Jun 01

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a po

CVE-2023-28642 HIGH This Week

7.8 Mar 29

runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 7.8

CVE-2022-29162 HIGH This Week

7.8 May 17

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. Rated high severity

CVE-2022-24769 MEDIUM This Month

5.9 Mar 24

Moby is an open-source project created by Docker to enable and accelerate software containerization. Rated medium severi

Same weakness CWE-403 – Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

View all

CVE-2026-40042 CRITICAL

9.3

CVE-2026-16526 HIGH

8.8

CVE-2025-3032 HIGH

7.4

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2023-4966 HIGH POC

7.5

CVE-2024-21626 vulnerability details – vuln.today

Back

Runc CVE-2024-21626

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

More in Runc

Same weakness CWE-403 – Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

Same technique Information Disclosure

Share

External POC / Exploit Code