diff --git a/Dockerfile.windows b/Dockerfile.windows
index 6523fcbb2a..e11b709395 100644
--- a/Dockerfile.windows
+++ b/Dockerfile.windows
@@ -166,7 +166,7 @@ FROM microsoft/windowsservercore
 SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"]
 
 ARG GO_VERSION=1.18.1
-ARG CONTAINERD_VERSION=1.6.2
+ARG CONTAINERD_VERSION=1.6.3
 ARG GOTESTSUM_VERSION=v1.7.0
 ARG GOWINRES_VERSION=v0.2.3
 
diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer
index a29c7eb9d5..9dd77f8b65 100755
--- a/hack/dockerfile/install/containerd.installer
+++ b/hack/dockerfile/install/containerd.installer
@@ -15,7 +15,7 @@ set -e
 # the binary version you may also need to update the vendor version to pick up
 # bug fixes or new APIs, however, usually the Go packages are built from a
 # commit from the master branch.
-: "${CONTAINERD_VERSION:=v1.6.2}"
+: "${CONTAINERD_VERSION:=v1.6.3}"
 
 install_containerd() (
 	echo "Install containerd version $CONTAINERD_VERSION"