TI-2021-12512 CVE-2021-32847 · GHSA-gpgx-6j76-jh6m
Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx
Priority MEDIUM 64
HyperKit is a toolkit for embedding hypervisor capabilities in an application.
Mobyproject
Records38All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
Mobyproject records in CISA KEVNo Mobyproject vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
38 records
TI-2024-15672 CVE-2024-23653 · GHSA-wr6v-9f75-vh2g
BuildKit interactive containers API does not validate entitlements check
Priority MEDIUM 55
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2024-15671 CVE-2024-23652 · GHSA-4v98-7qmw-rqr8
BuildKit possible host system access from mount stub cleaner
Priority MEDIUM 54
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-26126 CVE-2026-33747 · GHSA-4c29-8rgm-jvjj
BuildKit vulnerable to malicious frontend causing file escape outside of storage root
Priority MEDIUM 43
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2023-13346 CVE-2023-28840 · GHSA-232p-vwff-86mp
moby/moby's dockerd daemon encrypted overlay network may be unauthenticated
Priority MEDIUM 42
Moby is an open source container framework developed by Docker Inc.
TI-2024-15670 CVE-2024-23651 · GHSA-m3r6-h7wv-7xxv
BuildKit possible race condition with accessing subpaths from cache mounts
Priority MEDIUM 41
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-26127 CVE-2026-33748 · GHSA-4vrq-3vrq-g6gg
BuildKit Git URL subdir component can cause access to restricted files
Priority LOW 36
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2024-24355 CVE-2024-36623 · GHSA-gh5c-3h97-2f3q
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package…
Priority LOW 36
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
TI-2024-19200 CVE-2024-29018 · GHSA-mq39-4gv4-mvpx
External DNS requests from 'internal' networks could lead to data exfiltration
Priority LOW 36
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.
TI-2018-09052 CVE-2018-12608 · GHSA-qrqr-3x5j-2xw9
An issue was discovered in Docker Moby before 17.06.0.
Priority LOW 35
An issue was discovered in Docker Moby before 17.06.0.
TI-2024-16178 CVE-2024-24557 · GHSA-xw73-rw38-6vjc
Moby classic builder cache poisoning
Priority LOW 34
Moby is an open-source project created by Docker to enable software containerization.
TI-2021-12511 CVE-2021-32846 · GHSA-8j79-g729-4vv7
Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx
Priority LOW 34
HyperKit is a toolkit for embedding hypervisor capabilities in an application.
TI-2021-12510 CVE-2021-32845 · GHSA-hpc3-58qp-h295
Moby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify
Priority LOW 34
HyperKit is a toolkit for embedding hypervisor capabilities in an application.
TI-2023-13348 CVE-2023-28842 · GHSA-6wrf-mxfj-pf5p
moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated
Priority LOW 33
Moby) is an open source container framework developed by Docker Inc.
TI-2021-17933 CVE-2021-41091 · GHSA-3fwx-pjgw-3558
Insufficiently restricted permissions on data directory in Docker Engine
Priority LOW 33
Moby is an open-source project created by Docker to enable software containerization.
TI-2024-15669 CVE-2024-23650 · GHSA-9p26-698r-w4hx
BuildKit possible panic when incorrect parameters sent from frontend
Priority LOW 32
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2023-13347 CVE-2023-28841 · GHSA-33pg-m6jh-5237
moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted
Priority LOW 31
Moby is an open source container framework developed by Docker Inc.
TI-2023-11287 CVE-2023-26054 · GHSA-gc89-7gcr-jxqc
Credentials inlined to Git URLs could end up in provenance attestation in BuildKit
Priority LOW 31
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-30614 CVE-2026-42306 · GHSA-rg2x-37c3-w2rh
Moby: Race condition in docker cp allows bind mount redirection to host path
Priority LOW 30
Moby is an open source container framework.
Priority LOW 30
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources.
TI-2026-13283 CVE-2026-15789
Malicious client can bypass destination directory validation on local sources upload
Priority LOW 30
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.
TI-2024-24353 CVE-2024-36621 · GHSA-2mj3-vfvx-fc43
moby v25.0.5 is affected by a Race Condition in…
Priority LOW 30
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go.
TI-2024-24352 CVE-2024-36620 · GHSA-q59j-vv4j-v33c
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
Priority LOW 30
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
TI-2022-16532 CVE-2022-36109 · GHSA-rc4r-wh2q-q6c4
Moby vulnerability relating to supplementary group permissions
Priority LOW 30
Moby is an open-source project created by Docker to enable software containerization.
TI-2017-12151 CVE-2017-16539 · GHSA-vfjc-2qcw-j95j
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does…
Priority LOW 30
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveragin…