Docker

Records133All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high66CVSS 7.0–8.9

Exploited now

Docker records in CISA KEV

TI-2019-11833 Docker Desktop Community Edition Privilege Escalation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Docker 37 records CRITICAL Docker Desktop 18 records MEDIUM Desktop 13 records HIGH Engine 6 records MEDIUM Command Line Interface 2 records LOW Cs Engine 2 records LOW Libcontainer 2 records LOW Notary 2 records MEDIUM

Records

6 records in Engine · all components

TI-2026-26365 CVE-2026-34040 · GHSA-x744-4wpc-v9h2

Moby: AuthZ plugin bypass with oversized request body

MEDIUM 52

Moby is an open source container framework.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0927 Published 2026-03-31 Partial fix · 29.3.1, 2.0.0-beta.8 CWE-288

TI-2026-26337 CVE-2026-33997 · GHSA-pxq6-2prw-chj9

Moby: Off-by-one error in plugin privilege validation

LOW 37

Moby is an open source container framework.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00402 Published 2026-03-31 Partial fix · 29.3.1, 2.0.0-beta.8 CWE-193

TI-2020-10509 CVE-2020-13401 · GHSA-qrrc-ww9x-r43g

An issue was discovered in Docker Engine before 19.03.11.

LOW 32

An issue was discovered in Docker Engine before 19.03.11.

CVSS 3.1MEDIUM 6.0 Network Low privileges No interaction EPSS 0.02862 Published 2020-06-02 Partial fix · 19.03.11 CWE-20

TI-2026-30614 CVE-2026-42306 · GHSA-rg2x-37c3-w2rh

Moby: Race condition in docker cp allows bind mount redirection to host path

LOW 30

Moby is an open source container framework.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00104 Published 2026-06-12 Partial fix · 2.0.0-beta.14 CWE-367

TI-2018-14693 CVE-2018-20699 · GHSA-m9q8-9m2h-84gh

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory…

LOW 27

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.g…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02231 Published 2019-01-12 Fixed CWE-400

TI-2026-30123 CVE-2026-41568 · GHSA-vp62-88p7-qqf5

Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

LOW 26

Moby is an open source container framework.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00108 Published 2026-06-12 Partial fix · 2.0.0-beta.14 CWE-367

Open these records in search →