Mobyproject Moby vulnerabilities

• docker engine, moby, mobyproject moby\/v2 +2 more Moby: Race condition in docker cp allows bind mount redirection to host path CVE-2026-42306 Fix available 7.2 HighMay 18, 2026
• docker engine, moby, mobyproject moby\/v2 +2 more Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap CVE-2026-41568 Fix available 6.1 MediumMay 18, 2026
• moby Moby's Firewalld reload removes bridge network isolation CVE-2025-54410 Fix available 3.3 LowJuly 29, 2025
• moby Moby's Firewalld reload makes published container ports accessible from remote hosts CVE-2025-54388 Fix available 5.1 MediumJuly 29, 2025
• mobyproject moby Moby Race Condition vulnerability CVE-2024-36623 Fix available 8.1 HighNovember 29, 2024
• mobyproject moby Moby Race Condition vulnerability CVE-2024-36621 Fix available 6.5 MediumNovember 29, 2024
• mobyproject moby NULL Pointer Dereference on moby image history CVE-2024-36620 Fix available 6.5 MediumNovember 29, 2024
• moby Moby IPv6 enabled on IPv4-only network interfaces CVE-2024-32473 Fix available 4.7 MediumApril 18, 2024
• moby External DNS requests from 'internal' networks could lead to data exfiltration CVE-2024-29018 Fix available 5.9 MediumMarch 20, 2024
• moby Moby classic builder cache poisoning CVE-2024-24557 Fix available 6.9 MediumFebruary 1, 2024
• moby moby/moby's dockerd daemon encrypted overlay network may be unauthenticated CVE-2023-28840 Fix available 7.5 HighApril 4, 2023
• moby moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted CVE-2023-28841 Fix available 6.8 MediumApril 4, 2023
• moby moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated CVE-2023-28842 Fix available 6.8 MediumApril 4, 2023
• moby, fedoraproject fedora +1 more Moby vulnerability relating to supplementary group permissions CVE-2022-36109 Fix available 5.3 MediumSeptember 9, 2022
• kubernetes cri-o, mobyproject moby, fedoraproject fedora +1 more +3 more Incorrect Default Permissions in CRI-O CVE-2022-27652 Fix available 5.3 MediumApril 18, 2022
• debian linux, moby, fedoraproject fedora +1 more +3 more Default inheritable capabilities for linux container should be empty CVE-2022-24769 Fix available 5.9 MediumMarch 24, 2022
• moby, fedoraproject fedora +1 more Insufficiently restricted permissions on data directory in Docker Engine CVE-2021-41091 Public exploitFix available 6.3 MediumOctober 4, 2021
• moby, fedoraproject fedora +1 more `docker cp` allows unexpected chmod of host files CVE-2021-41089 Fix available 2.8 LowOctober 4, 2021
• mobyproject moby Docker Authentication Bypass CVE-2018-12608 Fix available 7.5 HighSeptember 10, 2018
• [unknown] docker, mobyproject moby, opensuse leap +3 more +5 more The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does... CVE-2018-10892 Fix available 6.3 MediumJuly 6, 2018
• mobyproject moby Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) CVE-2017-16539 Fix available 5.9 MediumNovember 4, 2017