vulnwire

All · Docker

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 9.2crit
    CVE-2026-112917Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall
    Docker
    3 d ago
  2. 5.7med
    CVE-2026-114409Docker Desktop logs can expose stored third-party credentials
    Docker
    10 d ago
  3. 8.2high
    CVE-2026-106581Docker Desktop for Windows installer failed to verify external packages
    Docker
    28 d ago
  4. 7.6high
    CVE-2026-92543Docker Engine insecure-registry fallback via malicious DNS responses
    Docker
    30 d ago
  5. 6.9med
    CVE-2026-92542Blind VXLAN injection into encrypted overlay networks from cluster peer
    Docker
    30 d ago
  6. 7.1high
    CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following
    Dockergo
    2 mo ago
  7. 8.2high
    CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
    Docker
    5 mo ago
  8. 8.2high
    CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading
    Docker
    5 mo ago
  9. 8.2high
    CVE-2026-5817Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends
    Docker
    5 mo ago
  10. 8.8high
    CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
    Docker
    5 mo ago
  11. 7.2high
    CVE-2026-42306Moby: Race condition in docker cp allows bind mount redirection to host path
    Dockergo
    5 mo ago
  12. 6.1med
    CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
    Dockergo
    5 mo ago
  13. 7.5high
    CVE-2026-41567Docker: `PUT /containers/{id}/archive` executes container binary on the host
    Dockergo
    5 mo ago
  14. 8.8high
    CVE-2026-34040Moby: AuthZ plugin bypass with oversized request body
    Dockergo
    7 mo ago
  15. 8.4high
    CVE-2026-33997Moby: Off-by-one error in plugin privilege validation
    Dockergo
    7 mo ago
  16. 7.8high
    CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel module
    Docker
    8 mo ago
  17. 6.7med
    CVE-2025-14740Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities
    Docker
    9 mo ago
  18. 7.5high
    CVE-2025-13743Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
    Docker
    10 mo ago
  19. 8.8high
    CVE-2025-9164Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
    Docker
    12 mo ago
  20. 8.7high
    CVE-2025-10657Docker Desktop with ECI Fails to Enforce Socket Command Restrictions
    Docker
    13 mo ago
  21. 9.3crit
    CVE-2025-9074Docker Desktop allows unauthenticated access to Docker Engine API from containers
    1 exploitDocker
    14 mo ago
  22. 3.3low
    CVE-2025-54410Moby's Firewalld reload removes bridge network isolation
    Dockergo
    15 mo ago
  23. 4.6med
    CVE-2025-54388Moby's Firewalld reload makes published container ports accessible from remote hosts
    Dockergo
    15 mo ago
  24. 5.2med
    CVE-2025-6587Exposure of system environment variables in Docker Desktop diagnostic logs
    Docker
    16 mo ago
  25. 5.2med
    CVE-2025-3911Exposure in Docker Desktop logs of environment variables configured for running containers
    Docker
    18 mo ago
  26. 4.3med
    CVE-2025-4095Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
    Docker
    18 mo ago
  27. 7.8high
    CVE-2025-3224Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion
    Docker
    18 mo ago
  28. 5.2med
    CVE-2025-1696Exposure of Proxy Credentials in Docker Desktop Logs
    Docker
    20 mo ago
  29. 8.1high
    CVE-2024-36623Moby Race Condition vulnerability
    Dockergo
    23 mo ago
  30. 6.5med
    CVE-2024-36621Moby Race Condition vulnerability
    Dockergo
    23 mo ago