Skip to contentDocker vulnerabilities
Newest
- docker desktopDocker Desktop 4.11.x allows --no-windows-containers flag bypassCVE-2023-06276.7 Medium
- docker desktopDocker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box routeCVE-2023-06268.0 High
- docker desktopDocker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelogCVE-2023-06258.0 High
- docker desktopDocker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URLCVE-2023-51668.0 High
- docker desktopDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellCVE-2023-51657.1 High
- docker machineDocker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide...CVE-2023-404536.5 Medium
- docker desktopDocker Desktop for Windows before 4.6 allows attackers to overwrite any file through the...CVE-2022-387306.3 Medium
- docker desktopDocker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through...CVE-2022-373267.8 High
- docker desktopDocker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink...CVE-2022-342927.1 High
- docker desktopDocker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv...CVE-2022-316477.1 High
- docker desktopIn Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedCVE-2023-18025.9 Medium
- docker desktopDocker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersCVE-2023-06297.1 High
- docker desktopDocker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:…CVE-2023-06286.1 Medium
- docker desktopDocker Desktop 4.3.0 has Incorrect Access Control.CVE-2021-447198.4 High
- docker desktopDocker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any...CVE-2022-266597.1 High
- dockerDocker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue...CVE-2022-25365Public exploit7.8 High
- docker desktopDocker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.CVE-2022-237745.3 Medium
- docker desktopDocker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token...CVE-2021-454495.5 Medium
- cli, docker command line interface, fedoraproject fedora +2 moreDocker CLI leaks private registry credentials to registry-1.docker.ioCVE-2021-41092Fix available5.4 Medium
- docker desktopDocker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is...CVE-2021-378417.8 High
- docker, moby, debian linux +1 more +3 moreprivilege escalation in MobyCVE-2021-21284Fix available6.8 Medium
- docker, debian linux, moby +1 more +3 moreDocker daemon crash during image pull of malicious imageCVE-2021-21285Fix available6.5 Medium
- dockerDocker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to...CVE-2021-31627.8 High
- dockerPath Traversal in Moby builderCVE-2020-27534Fix available5.3 Medium
- docker composer docker imageThe official composer docker images before 1.8.3 contain a blank password for a root user. System...CVE-2020-351849.8 Critical
- docker rabbitmq docker imageThe official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific)...CVE-2020-351969.8 Critical
- docker adminerThe official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user....CVE-2020-351869.8 Critical
- docker haproxy docker imageThe official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank...CVE-2020-351959.8 Critical
- docker memcached docker imageThe official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank...CVE-2020-351979.8 Critical
- docker ghost alpine docker imageThe official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password...CVE-2020-351859.8 Critical
- docker docsThe Docker Docs Docker image through 2020-12-14 contains a blank password for the root user....CVE-2020-354679.8 Critical
- docker registryVersions of the Official registry Docker images through 2.7.0 contain a blank password for the...CVE-2020-295919.8 Critical
- docker elixir alpine docker imageThe official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password...CVE-2020-295759.8 Critical
- docker storm docker imageThe official storm Docker images before 1.2.1 contain a blank password for a root user. Systems...CVE-2020-295809.8 Critical
- docker notary docker imageThe official notary docker images before signer-0.6.1-1 contain a blank password for a root user....CVE-2020-296019.8 Critical
- docker spiped alpine docker imageThe official spiped docker images before 1.5-alpine contain a blank password for a root user....CVE-2020-295819.8 Critical
- docker crux linux docker imageThe official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user....CVE-2020-293899.8 Critical
- [unknown] docker, redhat enterprise linux server +1 moreThe docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise...CVE-2020-143008.8 High
- [unknown] docker, redhat enterprise linux server, openshift container platform +2 moreThe version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053...CVE-2020-142988.8 High
- docker desktopcom.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of...CVE-2020-153607.8 High
- docker desktopAn issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up...CVE-2020-11492Public exploit7.8 High
- docker engine, broadcom sannav, debian linux +1 more +3 moreImproper Input Validation in Docker EngineCVE-2020-13401Public exploitFix available6.0 Medium
- docker desktopDocker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the...CVE-2020-10665Public exploit6.7 Medium
- dockerA vulnerability exists in Docker before 1.2 via container names, which may collide with and...CVE-2014-5278Fix available5.3 Medium
- docker, apache geode, docker.io +2 moreAn issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via...CVE-2014-0048Fix available9.8 Critical
- dockerPath Traversal in DockerCVE-2014-9356Fix available8.6 High
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- docker desktop community edition, docker, apache geode +2 moreDocker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing...CVE-2019-15752In KEVPublic exploitEPSS 48.8%7.8 High
- dockerIn Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path...CVE-2019-13139Public exploitFix available8.4 High
- docker, debian linux, opensuse leap +2 moreMoby Docker cp broken with debian containersCVE-2019-14271Public exploitFix availableEPSS 18.8%9.8 Critical
- Show moreLoading…