Docker
50 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Docker, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Docker CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 1 |
| 2026-09 | 0 |
Severity
How the 50 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High24
- Medium19
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Docker.
- CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following—
- CVE-2024-41110Moby authz zero length regression9.9
- CVE-2023-0629Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers7.1
- CVE-2023-0628Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL6.1
- CVE-2022-25365Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.7.8
- CVE-2021-41089`docker cp` allows unexpected chmod of host files2.8
- CVE-2021-41091Insufficiently restricted permissions on data directory in Docker Engine6.3
- CVE-2021-41092Docker CLI leaks private registry credentials to registry-1.docker.io5.4
- CVE-2021-33183Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management component in Synology Docker before 18.09.0-0515 allows local users to read ...7.9
- CVE-2021-21284privilege escalation in Moby6.8
- CVE-2021-21285Docker daemon crash during image pull of malicious image6.5
- CVE-2021-3162Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.7.8
- CVE-2020-27534util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil...5.3
- CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incor...8.8
- CVE-2020-14298The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fix...8.8
Product grouping is registry-driven, with AI assist and human review. How it works