Docker

CVEs (43)

• CVE-2019-15752HigKEVAug 28, 2019
  Docker

  Docker
  risk 0.68cvss 7.8epss 0.32

  Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate…

• CVE-2014-0048CriJan 2, 2020
  Docker

  Docker
  risk 0.64cvss 9.8epss 0.07

  An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

• CVE-2019-5736HigFeb 11, 2019
  Docker

  Docker
  risk 0.60cvss 8.6epss 0.98

  runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new…

• CVE-2024-41110CriJul 24, 2024
  Docker

  Docker
  risk 0.59cvss 9.9epss 0.17

  Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base…

• CVE-2024-9348HigOct 16, 2024
  Docker

  Docker
  risk 0.58cvss —epss 0.00

  Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

• CVE-2019-14271CriJul 29, 2019
  Docker

  Docker
  risk 0.58cvss 9.8epss 0.19

  In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

• CVE-2026-6406HigMay 22, 2026
  Docker

  Desktop
  risk 0.57cvss 8.8epss 0.00

  The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket…

• CVE-2020-14300HigJul 13, 2020
  Docker

  Docker
  risk 0.57cvss 8.8epss 0.00

  The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the…

• CVE-2020-14298HigJul 13, 2020
  Docker

  Docker
  risk 0.57cvss 8.8epss 0.00

  The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container…

• CVE-2018-15514HigSep 1, 2018
  Docker

  Docker
  risk 0.57cvss 8.8epss 0.02

  HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in…

• CVE-2014-9356HigDec 2, 2019
  Docker

  Docker
  risk 0.56cvss 8.6epss 0.05

  Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.

• CVE-2014-5282HigFeb 6, 2018
  Docker

  Docker
  risk 0.53cvss 8.1epss 0.01

  Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.

• CVE-2025-3224HigApr 28, 2025
  Docker

  Desktop
  risk 0.51cvss 7.8epss 0.00

  A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path…

• CVE-2022-25365HigFeb 19, 2022
  Docker

  Docker
  risk 0.51cvss 7.8epss 0.01

  Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.

• CVE-2021-3162HigJan 15, 2021
  Docker

  Docker
  risk 0.51cvss 7.8epss 0.00

  Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.

• CVE-2014-0047HigOct 6, 2017
  Docker

  Docker
  risk 0.51cvss 7.8epss 0.00

  Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage.

• CVE-2014-8179HigDec 17, 2019
  Docker

  Docker
  risk 0.49cvss 7.5epss 0.03

  Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.

• CVE-2019-13509HigJul 18, 2019
  Docker

  Docker
  risk 0.49cvss 7.5epss 0.04

  In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes…

• CVE-2016-8867HigOct 28, 2016
  Docker

  Docker
  risk 0.49cvss 7.5epss 0.03

  Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

• CVE-2025-15558HigMar 4, 2026
  Docker

  Compose
  risk 0.45cvss 8.0epss 0.00

  Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that…