# cve.now: Docker

The newest entries affecting Docker (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-114409](https://cve.now/CVE-2026-114409.md): Docker Desktop logs can expose stored third-party credentials (CVSS 5.7, Docker Desktop)
- [CVE-2026-116102](https://cve.now/CVE-2026-116102.md): QuantGeekDev docker-mcp docker\_executor.py \_build\_windows\_command os command injection (CVSS 5.3, QuantGeekDev docker-mcp)
- [CVE-2026-116070](https://cve.now/CVE-2026-116070.md): Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config (CVSS 6.9, dqzboy Docker-Proxy)
- [CVE-2026-105445](https://cve.now/CVE-2026-105445.md): Docker Hub account conversion could reassign an active personal access token to another user (CVSS 9.4, Docker Hub)
- [CVE-2026-95838](https://cve.now/CVE-2026-95838.md): containerd: Unpack DoS via repeated opaque whiteouts (CVSS 4.6, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-95837](https://cve.now/CVE-2026-95837.md): containerd CRI plugin: Checkpoint restore bypasses destination security context (CVSS 7.8, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-106581](https://cve.now/CVE-2026-106581.md): Docker Desktop for Windows installer failed to verify external packages (CVSS 8.2, Docker Desktop)
- [CVE-2026-105452](https://cve.now/CVE-2026-105452.md): Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts (CVSS 5.9, Docker Sandboxes)
- [CVE-2026-101998](https://cve.now/CVE-2026-101998.md): Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials (CVSS 5.9, Docker Sandboxes)
- [CVE-2026-105570](https://cve.now/CVE-2026-105570.md): Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host (CVSS 6.7, Docker Sandboxes)
- [CVE-2026-92543](https://cve.now/CVE-2026-92543.md): Docker Engine insecure-registry fallback via malicious DNS responses (CVSS 7.6, Docker Engine · Moby)
- [CVE-2026-92542](https://cve.now/CVE-2026-92542.md): Blind VXLAN injection into encrypted overlay networks from cluster peer (CVSS 6.9, Docker Engine · Moby overlay network driver)
- [CVE-2026-103433](https://cve.now/CVE-2026-103433.md): Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions (CVSS 6.9, Docker Buildx)
- [CVE-2026-82973](https://cve.now/CVE-2026-82973.md): Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox (CVSS 9.4, psyb0t docker-mailbox)
- [CVE-2026-53493](https://cve.now/CVE-2026-53493.md): Containerd has image-pull DoS via crafted OCI index graph amplification (CVSS 6.9, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-79994](https://cve.now/CVE-2026-79994.md): Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race (CVSS 8.7, Docker Sandboxes)
- [CVE-2026-77179](https://cve.now/CVE-2026-77179.md): Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback (CVSS 9.4, Docker Sandboxes)
- [CVE-2026-53495](https://cve.now/CVE-2026-53495.md): containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service (CVSS 6.8, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-78122](https://cve.now/CVE-2026-78122.md): docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems (CVSS 8.3, Tecnativa docker-socket-proxy)
- [CVE-2026-17106](https://cve.now/CVE-2026-17106.md): Tar extraction in moby/go-archive can write outside the destination directory via link following (CVSS 7.1, moby go-archive · Docker Sandboxes +5)
- [CVE-2026-18171](https://cve.now/CVE-2026-18171.md): Docker Sandboxes read-only runtime mount writable through its shared-export alias (CVSS 5.7, Docker Sandboxes)
- [CVE-2026-53489](https://cve.now/CVE-2026-53489.md): containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore (CVSS 8.2, containerd · github.com/containerd/containerd +1)
- [CVE-2026-53492](https://cve.now/CVE-2026-53492.md): containerd CRI checkpoint restore CDI annotation smuggling (CVSS 8.4, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-50195](https://cve.now/CVE-2026-50195.md): containerd: CRI checkpoint import allows local image tag poisoning (CVSS 5.6, containerd · github.com/containerd/containerd/v2 +1)
- [CVE-2026-47262](https://cve.now/CVE-2026-47262.md): containerd image-triggered runtime DoS via unbounded group parsing (CVSS 5.3, containerd · github.com/containerd/containerd +1)
- [CVE-2026-46680](https://cve.now/CVE-2026-46680.md): containerd user ID handling bypass allows runAsNonRoot evasion (CVSS 7.3, containerd · github.com/containerd/containerd +1)
- [CVE-2026-53488](https://cve.now/CVE-2026-53488.md): containerd CRI plugin: — image-config \`LABEL\` flows to restart-monitor \`binary://\` logger: host-root command execution from an image pull (CVSS 9.4, containerd · github.com/containerd/containerd +1)
- [CVE-2026-41579](https://cve.now/CVE-2026-41579.md): runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations (CVSS 3.3, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2026-12539](https://cve.now/CVE-2026-12539.md): Docker Sandboxes ICMP egress restriction bypass after daemon restart (CVSS 5.1, Docker Sandboxes)
- [CVE-2026-12039](https://cve.now/CVE-2026-12039.md): Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution (CVSS 5.7, Docker Sandboxes)
- [CVE-2026-42306](https://cve.now/CVE-2026-42306.md): Moby: Race condition in docker cp allows bind mount redirection to host path (CVSS 7.2, moby · github.com/docker/docker +2)
- [CVE-2026-41568](https://cve.now/CVE-2026-41568.md): Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap (CVSS 6.1, moby · github.com/docker/docker +2)
- [CVE-2026-41567](https://cve.now/CVE-2026-41567.md): Docker: \`PUT /containers/{id}/archive\` executes container binary on the host (CVSS 7.2, moby/v2/daemon · moby Docker Engine +4)
- [CVE-2026-8936](https://cve.now/CVE-2026-8936.md): Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM (CVSS 8.2, Docker Desktop)
- [CVE-2026-5843](https://cve.now/CVE-2026-5843.md): Docker Model Runner container-to-host code execution via MLX-LM model\_file importlib loading (CVSS 8.8, Docker Desktop)
- [CVE-2026-5817](https://cve.now/CVE-2026-5817.md): Docker Model Runner container-to-host code execution via unsandboxed trust\_remote\_code in Python inference backends (CVSS 8.8, Docker Desktop)
- [CVE-2026-6406](https://cve.now/CVE-2026-6406.md): Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag (CVSS 8.8, Docker Desktop)
- [CVE-2026-5741](https://cve.now/CVE-2026-5741.md): suvarchal docker-mcp-server HTTP index.ts pull\_image os command injection (CVSS 6.9, suvarchal docker-mcp-server)
- [CVE-2026-33997](https://cve.now/CVE-2026-33997.md): Moby: Off-by-one error in plugin privilege validation (CVSS 6.8, moby · github.com/docker/docker +2)
- [CVE-2026-34040](https://cve.now/CVE-2026-34040.md): Moby: AuthZ plugin bypass with oversized request body (CVSS 8.8, moby · github.com/moby/moby +2)
- [CVE-2025-15558](https://cve.now/CVE-2025-15558.md): Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.0, Docker CLI · Docker Compose +4)
- [CVE-2026-27887](https://cve.now/CVE-2026-27887.md): Spin has memory leaks in various WIT interfaces (CVSS 6.9, spinframework spin · spinframework SpinKube +1)
- [CVE-2026-2664](https://cve.now/CVE-2026-2664.md): Out of bounds read vulnerability in grpcfuse kernel module (CVSS 6.8, Docker Desktop)
- [CVE-2025-14740](https://cve.now/CVE-2025-14740.md): Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities (CVSS 6.7, Docker Desktop)
- [CVE-2025-13743](https://cve.now/CVE-2025-13743.md): Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs (CVSS 2.4, Docker Desktop)
- [CVE-2025-64329](https://cve.now/CVE-2025-64329.md): containerd CRI server: Host memory exhaustion through Attach goroutine leak (CVSS 6.9, containerd · github.com/containerd/containerd +1)
- [CVE-2025-52881](https://cve.now/CVE-2025-52881.md): runc: LSM labels can be bypassed with malicious config using dummy procfs files (CVSS 7.3, opencontainers runc · github.com/opencontainers/runc +1)
- [CVE-2025-52565](https://cve.now/CVE-2025-52565.md): container escape due to /dev/console mount and related races (CVSS 8.4, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2025-31133](https://cve.now/CVE-2025-31133.md): runc container escape via "masked path" abuse due to mount race conditions (CVSS 7.3, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2024-25621](https://cve.now/CVE-2024-25621.md): containerd affected by a local privilege escalation via wide permissions on CRI directory (CVSS 7.3, containerd · github.com/containerd/containerd +1)
- [CVE-2025-9164](https://cve.now/CVE-2025-9164.md): Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows (CVSS 8.8, Docker Desktop)
- [CVE-2025-10657](https://cve.now/CVE-2025-10657.md): Docker Desktop with ECI Fails to Enforce Socket Command Restrictions (CVSS 8.7, Docker Desktop)
- [CVE-2025-9074](https://cve.now/CVE-2025-9074.md): Docker Desktop allows unauthenticated access to Docker Engine API from containers (CVSS 9.3, Docker Desktop)
- [CVE-2025-54410](https://cve.now/CVE-2025-54410.md): Moby's Firewalld reload removes bridge network isolation (CVSS 3.3, moby · github.com/docker/docker)
- [CVE-2025-54388](https://cve.now/CVE-2025-54388.md): Moby's Firewalld reload makes published container ports accessible from remote hosts (CVSS 5.1, moby · github.com/docker/docker)
- [CVE-2025-7381](https://cve.now/CVE-2025-7381.md): Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images (CVSS 5.3, Docker Mautic)
- [CVE-2025-6587](https://cve.now/CVE-2025-6587.md): Exposure of system environment variables in Docker Desktop diagnostic logs (CVSS 5.2, Docker Desktop)
- [CVE-2025-47291](https://cve.now/CVE-2025-47291.md): containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (CVSS 4.6, containerd · github.com/containerd/containerd/v2)
- [CVE-2025-47290](https://cve.now/CVE-2025-47290.md): Containerd vulnerable to host filesystem access during image unpack (CVSS 7.6, containerd · github.com/containerd/containerd/v2)
- [CVE-2025-3911](https://cve.now/CVE-2025-3911.md): Exposure in Docker Desktop logs of environment variables configured for running containers (CVSS 5.2, Docker Desktop)
- [CVE-2025-4095](https://cve.now/CVE-2025-4095.md): Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile (CVSS 4.3, Docker Desktop)
- [CVE-2025-3224](https://cve.now/CVE-2025-3224.md): Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion (CVSS 7.3, Docker Desktop)
- [CVE-2024-40635](https://cve.now/CVE-2024-40635.md): containerd has an integer overflow in User ID handling (CVSS 4.6, containerd · github.com/containerd/containerd +1)
- [CVE-2025-1696](https://cve.now/CVE-2025-1696.md): Exposure of Proxy Credentials in Docker Desktop Logs (CVSS 5.2, Docker Desktop)
- [CVE-2024-36620](https://cve.now/CVE-2024-36620.md): moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image\_history.go. (CVSS 6.5, github.com/moby/moby)
- [CVE-2024-36621](https://cve.now/CVE-2024-36621.md): moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. (CVSS 6.5, github.com/moby/moby)
- [CVE-2024-36623](https://cve.now/CVE-2024-36623.md): moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent writ (CVSS 8.1, github.com/moby/moby)
- [CVE-2024-9348](https://cve.now/CVE-2024-9348.md): Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view (CVSS 8.9, Docker Desktop)
- [CVE-2024-8696](https://cve.now/CVE-2024-8696.md): A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 8.9, Docker Desktop)
- [CVE-2024-8695](https://cve.now/CVE-2024-8695.md): A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 9.0, Docker Desktop)
- [CVE-2024-45310](https://cve.now/CVE-2024-45310.md): runc can be confused to create empty files/directories on the host (CVSS 3.6, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2024-41110](https://cve.now/CVE-2024-41110.md): Moby authz zero length regression (CVSS 10.0, moby · github.com/moby/moby +1)
- [CVE-2024-6222](https://cve.now/CVE-2024-6222.md): In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages (CVSS 7.3, Docker Desktop)
- [CVE-2024-5652](https://cve.now/CVE-2024-5652.md): In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode (CVSS 6.1, Docker Desktop)
- [CVE-2024-32473](https://cve.now/CVE-2024-32473.md): Moby IPv6 enabled on IPv4-only network interfaces (CVSS 4.7, moby · github.com/docker/docker)
- [CVE-2024-29018](https://cve.now/CVE-2024-29018.md): External DNS requests from 'internal' networks could lead to data exfiltration (CVSS 5.9, moby · github.com/docker/docker)
- [CVE-2024-24557](https://cve.now/CVE-2024-24557.md): Moby classic builder cache poisoning (CVSS 6.9, moby · github.com/docker/docker +1)
- [CVE-2024-21626](https://cve.now/CVE-2024-21626.md): runc container breakout through process.cwd trickery and leaked fds (CVSS 8.6, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2023-0633](https://cve.now/CVE-2023-0633.md): In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE (CVSS 7.2, Docker Desktop)
- [CVE-2023-0627](https://cve.now/CVE-2023-0627.md): Docker Desktop 4.11.x allows --no-windows-containers flag bypass (CVSS 6.7, Docker Desktop)
- [CVE-2023-0626](https://cve.now/CVE-2023-0626.md): Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route (CVSS 8.0, Docker Desktop)
- [CVE-2023-0625](https://cve.now/CVE-2023-0625.md): Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog (CVSS 8.0, Docker Desktop)
- [CVE-2023-5166](https://cve.now/CVE-2023-5166.md): Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL (CVSS 8.0, Docker Desktop)
- [CVE-2023-5165](https://cve.now/CVE-2023-5165.md): Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell (CVSS 7.1, Docker Desktop)
- [CVE-2023-1802](https://cve.now/CVE-2023-1802.md): In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed (CVSS 5.9, Docker Desktop)
- [CVE-2023-28840](https://cve.now/CVE-2023-28840.md): moby/moby's dockerd daemon encrypted overlay network may be unauthenticated (CVSS 7.5, moby · github.com/docker/docker)
- [CVE-2023-28841](https://cve.now/CVE-2023-28841.md): moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted (CVSS 6.8, moby · github.com/docker/docker)
- [CVE-2023-28842](https://cve.now/CVE-2023-28842.md): moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated (CVSS 6.8, moby · github.com/docker/docker)
- [CVE-2023-25809](https://cve.now/CVE-2023-25809.md): rootless: \`/sys/fs/cgroup\` is writable when cgroupns isn't unshared in runc (CVSS 5.0, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2023-28642](https://cve.now/CVE-2023-28642.md): AppArmor bypass with symlinked /proc in runc (CVSS 6.1, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2023-0629](https://cve.now/CVE-2023-0629.md): Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers (CVSS 7.1, Docker Desktop)
- [CVE-2023-0628](https://cve.now/CVE-2023-0628.md): Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL (CVSS 6.1, Docker Desktop)
- [CVE-2023-27561](https://cve.now/CVE-2023-27561.md): runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs\_linux.go. (CVSS 7.0, github.com/opencontainers/runc)
- [CVE-2023-25173](https://cve.now/CVE-2023-25173.md): containerd supplementary groups are not set up properly (CVSS 5.3, containerd · github.com/containerd/containerd)
- [CVE-2023-25153](https://cve.now/CVE-2023-25153.md): containerd OCI image importer memory exhaustion (CVSS 6.2, containerd · github.com/containerd/containerd)
- [CVE-2022-23471](https://cve.now/CVE-2022-23471.md): containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak (CVSS 5.7, containerd · github.com/containerd/containerd)
- [CVE-2022-36109](https://cve.now/CVE-2022-36109.md): Moby vulnerability relating to supplementary group permissions (CVSS 5.3, moby · github.com/docker/docker)
- [CVE-2022-31030](https://cve.now/CVE-2022-31030.md): containerd CRI plugin: Host memory exhaustion through ExecSync (CVSS 5.5, containerd · github.com/containerd/containerd)
- [CVE-2022-29162](https://cve.now/CVE-2022-29162.md): Incorrect Default Permissions in runc (CVSS 5.9, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2022-24769](https://cve.now/CVE-2022-24769.md): Default inheritable capabilities for linux container should be empty (CVSS 5.9, moby · github.com/moby/moby +1)
- [CVE-2022-23648](https://cve.now/CVE-2022-23648.md): Insecure handling of image volumes in containerd CRI plugin (CVSS 7.5, containerd · github.com/containerd/containerd)
- [CVE-2021-43816](https://cve.now/CVE-2021-43816.md): Improper Preservation of Permissions in containerd (CVSS 8.0, containerd · github.com/containerd/containerd)
- [CVE-2021-43784](https://cve.now/CVE-2021-43784.md): Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration (CVSS 6.0, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2021-23732](https://cve.now/CVE-2021-23732.md): Arbitrary Code Execution (CVSS 9.0, docker-cli-js)
- [CVE-2021-41089](https://cve.now/CVE-2021-41089.md): \`docker cp\` allows unexpected chmod of host files (CVSS 2.8, moby · github.com/docker/docker +1)
- [CVE-2021-41091](https://cve.now/CVE-2021-41091.md): Insufficiently restricted permissions on data directory in Docker Engine (CVSS 6.3, moby · github.com/docker/docker +1)
- [CVE-2021-41103](https://cve.now/CVE-2021-41103.md): Insufficiently restricted permissions on plugin directories (CVSS 5.9, containerd · github.com/containerd/containerd)
- [CVE-2021-32760](https://cve.now/CVE-2021-32760.md): Archive package allows chmod of file outside of unpack target directory (CVSS 5.0, containerd · github.com/containerd/containerd)
- [CVE-2021-30465](https://cve.now/CVE-2021-30465.md): runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. (no CVSS, github.com/opencontainers/runc)
- [CVE-2021-21334](https://cve.now/CVE-2021-21334.md): environment variable leak (CVSS 6.3, containerd · github.com/containerd/containerd)
- [CVE-2021-21284](https://cve.now/CVE-2021-21284.md): privilege escalation in Moby (CVSS 6.8, moby · github.com/moby/moby)
- [CVE-2021-21285](https://cve.now/CVE-2021-21285.md): Docker daemon crash during image pull of malicious image (CVSS 6.5, moby · github.com/moby/moby)
- [CVE-2020-27534](https://cve.now/CVE-2020-27534.md): util/binfmt\_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathna (no CVSS, github.com/moby/moby · github.com/docker/docker)
- [CVE-2020-15257](https://cve.now/CVE-2020-15257.md): containerd-shim API Exposed to Host Network Containers (CVSS 5.2, containerd · github.com/containerd/containerd)
- [CVE-2020-15157](https://cve.now/CVE-2020-15157.md): containerd can be coerced into leaking credentials during image pull (CVSS 6.1, containerd · github.com/containerd/containerd)
- [CVE-2020-14300](https://cve.now/CVE-2020-14300.md): The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://a (no CVSS, Docker)
- [CVE-2020-14298](https://cve.now/CVE-2020-14298.md): The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc mi (no CVSS, Docker)
- [CVE-2020-7606](https://cve.now/CVE-2020-7606.md): docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. (no CVSS, docker-compose-remote-api)
- [CVE-2019-19921](https://cve.now/CVE-2019-19921.md): runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs\_linux.go. (no CVSS, github.com/opencontainers/runc)
- [CVE-2014-8179](https://cve.now/CVE-2014-8179.md): Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON re (no CVSS, Docker Engine · CS Docker Engine)
- [CVE-2014-8178](https://cve.now/CVE-2014-8178.md): Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes (no CVSS, Docker Engine · CS Docker Engine)
- [CVE-2014-9356](https://cve.now/CVE-2014-9356.md): Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection me (no CVSS, github.com/docker/docker)
- [CVE-2019-16884](https://cve.now/CVE-2019-16884.md): runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/roo (no CVSS, github.com/opencontainers/runc · github.com/opencontainers/…)
- [CVE-2019-14271](https://cve.now/CVE-2019-14271.md): In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamical (no CVSS, github.com/docker/docker · github.com/moby/moby)
- [CVE-2019-1020014](https://cve.now/CVE-2019-1020014.md): docker-credential-helpers before 0.6.3 has a double free in the List functions. (no CVSS, docker-credential-helpers)
- [CVE-2019-13509](https://cve.now/CVE-2019-13509.md): In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode ma (no CVSS, github.com/docker/docker)
- [CVE-2018-12608](https://cve.now/CVE-2018-12608.md): An issue was discovered in Docker Moby before 17.06.0. (no CVSS, github.com/docker/docker)
- [CVE-2018-11757](https://cve.now/CVE-2018-11757.md): In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may a (no CVSS, Apache Software Foundation Docker Skeleton Runtime for Apac…)
- [CVE-2018-10892](https://cve.now/CVE-2018-10892.md): The default OCI linux spec in oci/defaults{\_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. (CVSS 6.3, \[UNKNOWN\] docker)
- [CVE-2017-16539](https://cve.now/CVE-2017-16539.md): The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attacke (CVSS 5.9, github.com/moby/moby)
- [CVE-2016-9962](https://cve.now/CVE-2016-9962.md): RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. (no CVSS, github.com/opencontainers/runc)
- [CVE-2016-3697](https://cve.now/CVE-2016-3697.md): libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, wh (no CVSS, github.com/opencontainers/runc)
- [CVE-2015-3627](https://cve.now/CVE-2015-3627.md): Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows (no CVSS, github.com/docker/docker)
- [CVE-2015-3629](https://cve.now/CVE-2015-3629.md): Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitr (no CVSS, github.com/docker/docker)
- [CVE-2015-3630](https://cve.now/CVE-2015-3630.md): Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer\_stats, (3) /proc/latency\_stats, and (4) /proc/fs, whi (no CVSS, github.com/docker/docker)
- [CVE-2015-3631](https://cve.now/CVE-2015-3631.md): Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker\_t policies via an image that allows v (no CVSS, github.com/docker/docker)
- [CVE-2014-9357](https://cve.now/CVE-2014-9357.md): Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in (no CVSS, github.com/docker/docker)
- [CVE-2014-9358](https://cve.now/CVE-2014-9358.md): Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof reposito (no CVSS, github.com/docker/docker)
- [CVE-2014-6407](https://cve.now/CVE-2014-6407.md): Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack (no CVSS, github.com/docker/docker)
- [CVE-2014-6408](https://cve.now/CVE-2014-6408.md): Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container b (no CVSS, github.com/docker/docker)
- [CVE-2014-5277](https://cve.now/CVE-2014-5277.md): Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-mi (no CVSS, docker-py · github.com/docker/docker)
- [CVE-2014-3499](https://cve.now/CVE-2014-3499.md): Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via un (no CVSS, github.com/docker/docker)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/docker
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.