C
CRI-O
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 30, 2024 to present
9
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
0High
2Medium
7Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
Most Affected Products
1. cri-o cri-o9
2. go/github.com/cri-o/cri-o2
3. Red Hat OpenShift1
4. Kubernetes Kubelet1
5. Kubernetes kube-apiserver1
Recent Vulnerabilities
See more →CVE-2026-17113
CVSS 6.0medium
Cri-o: cri-o: unvalidated image env var causes daemon crash
Jul 24, 2026🔧 No Patch
REDHAT-BUG-2506872
CVSS 4.0medium
Jul 24, 2026🔧 No Patch
CVE-2026-15809
CVSS 7.8high
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
Jul 15, 2026🔧 No Patch
REDHAT-BUG-2457729
CVSS 7.0high
Apr 13, 2026🔧 No Patch
CVE-2025-4437
CVSS 5.7medium
Cri-o: large /etc/passwd file may lead to denial of service
Jun 26, 2025🔧 No Patch
REDHAT-BUG-2375084
CVSS 4.0medium
Jun 26, 2025🔧 No Patch
CVE-2025-0750
CVSS 6.6medium
Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
Jan 22, 2025🔧 No Patch
REDHAT-BUG-2339405
CVSS 4.0medium
Jan 22, 2025🔧 No Patch
REDHAT-BUG-2315691
CVSS 4.0medium
Sep 30, 2024🔧 No Patch
Monitor CRI-O in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.