What’s Vulnerable › Products
Docker Engine vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your Docker Engine version is affected
Latest Docker Engine vulnerabilities
- CVE-2026-92543 — Docker Engine insecure-registry fallback via malicious DNS responses (CVSS 7.6)
- CVE-2026-42306 — Moby: Race condition in docker cp allows bind mount redirection to host path (CVSS 7.2)
- CVE-2026-41568 — Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap (CVSS 6.1)
- CVE-2025-54410 — Moby's Firewalld reload removes bridge network isolation (CVSS 5.2)
- CVE-2025-54388 — Moby's Firewalld reload makes published container ports accessible from remote hosts (CVSS 4.6)
- CVE-2024-36623 — (CVSS 8.1)
- CVE-2024-36621 — (CVSS 6.5)
- CVE-2024-36620 — (CVSS 6.5)
- CVE-2024-32473 — Moby IPv6 enabled on IPv4-only network interfaces (CVSS 6.5)
- CVE-2024-29018 — External DNS requests from 'internal' networks could lead to data exfiltration (CVSS 7.5)
- CVE-2024-24557 — Moby classic builder cache poisoning (CVSS 7.8)
- CVE-2023-28842 — moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated (CVSS 6.8)
- CVE-2023-28841 — moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted (CVSS 6.8)
- CVE-2023-28840 — moby/moby's dockerd daemon encrypted overlay network may be unauthenticated (CVSS 8.7)
- CVE-2022-36109 — Moby vulnerability relating to supplementary group permissions (CVSS 6.3)
- CVE-2022-27652 — (CVSS 5.3)
- CVE-2022-24769 — Default inheritable capabilities for linux container should be empty (CVSS 5.9)
- CVE-2021-41091 — Insufficiently restricted permissions on data directory in Docker Engine (CVSS 6.3)
- CVE-2021-41089 — `docker cp` allows unexpected chmod of host files (CVSS 6.3)
- CVE-2018-12608 — (CVSS 7.5)
- CVE-2018-10892 — (CVSS 5.3)
- CVE-2017-16539 — (CVSS 5.9)