Login Request a demo
EN
Product
Engine
by Docker · last CVE Jun 12, 2026
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities6In the news1Timeline
Severity mix
Critical 0High 3Medium 3Low 0
Severity
All severities6Critical0High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Engine to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33997
8.1
0%
Mar 31
Moby: Off-by-one error in plugin privilege validation
Affected: before 29.3.1
CVE-2026-34040
7.8
9%
Mar 31
Moby: AuthZ plugin bypass with oversized request body
Affected: before 29.3.1
CVE-2026-42306
7.2
0%
Jun 12
Moby: Race condition in docker cp allows bind mount redirection to host path
Affected: before 29.5.1
CVE-2026-41568
6.1
0%
Jun 12
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
Affected: before 29.5.1
CVE-2020-13401
6.0
3%
Jun 2
An issue was discovered in Docker Engine before 19.03.11
Affected: before 19.03.11
CVE-2018-20699
4.9
2%
Jan 12
Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to…
Affected: before 18.09
Showing 6