DO
Product
Docker
On CISA KEVExploited in the wild
37
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 17Medium 9Low 0
Watch
Add Docker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15752 In wildKEV | 7.8 | Aug 28 | Docker Desktop Community Edition Privilege Escalation Vulnerability Affected: before 2.1.0.1 |
| CVE-2020-14300 | 8.8 | Jul 13 | The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)… Affected: 1.13.1 |
| CVE-2020-14298 | 8.8 | Jul 13 | The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which… Affected: 1.13.1 |
| CVE-2018-15514 | 8.8 | Sep 1 | HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe… Affected: 1.10.0.0-0; 1.10.1.42-1; 1.10.2.12; 1.10.2.14; 1.10.4.0; 1.10.6; +34 more |
| CVE-2014-9356 | 8.6 | Dec 2 | Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a… Affected: before 1.3.3 |
| CVE-2019-5736 | 8.6 | Feb 11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by… Affected: before 18.09.2 |
| CVE-2019-13139 | 8.4 | Aug 22 | In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be able to gain command execution Affected: before 18.09.4 |
| CVE-2014-5282 | 8.1 | Feb 6 | Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load' Affected: before 1.3 |
| CVE-2022-25365 | 7.8 | Feb 19 | Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files Affected: before 4.5.1 |
| CVE-2021-3162 | 7.8 | Jan 15 | Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation Affected: before 2.5.0.0 |
| CVE-2014-0047 | 7.8 | Oct 6 | Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage Affected: through 1.4.1 |
| CVE-2016-3697 | 7.8 | Jun 1 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain… Affected: through 1.11.1 |
| CVE-2014-8179 | 7.5 | Dec 17 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which… Affected: before 1.8.3 |
| CVE-2019-16884 | 7.5 | Sep 25 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount… Affected: through 19.03.2 |
| CVE-2019-13509 | 7.5 | Jul 18 | In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug… Affected: 18.09.0 before 18.09.8; 17.03.2; 17.03.2; 17.03.2; 17.03.2; 17.03.2; +34 more |
| CVE-2018-15664 | 7.5 | May 23 | In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary… Affected: 17.06.0-ce; 17.06.0-ce; 17.06.0-ce; 17.06.0-ce; 17.06.0-ce; 17.06.0-ce; +34 more |
| CVE-2016-8867 | 7.5 | Oct 28 | Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies Affected: 1.12.2 |
Showing 17