Three critical security vulnerabilities (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) have been discovered in the Docker company's runC container runtime. A malicious actor could exploit several of these vulnerabilities to perform privilege escalation on the targeted system. The vulnerabilities affect all versions of the runC container runtime up to versions 1.2.8, 1.3.3, and 1.4.0-rc.3.

Source: xakep.ru