MO
Product
moby
5
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch
Add moby to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33997 | 8.1 | Mar 31 | Moby: Off-by-one error in plugin privilege validation Affected: < 29.3.1 |
| CVE-2026-34040 | 7.8 | Mar 31 | Moby: AuthZ plugin bypass with oversized request body Affected: < 29.3.1 |
| CVE-2026-92543 | 7.6 | Oct 7 | Docker Engine insecure-registry fallback via malicious DNS responses Affected: before v2.0.0-beta.25 |
| CVE-2026-42306 | 7.2 | Jun 12 | Moby: Race condition in docker cp allows bind mount redirection to host path Affected: github.com/docker/docker/daemon <= 28.5.2; Docker Engine < 29.5.1; github.com/moby/moby/v2/daemon < 2.0.0-beta.14 |
| CVE-2026-41568 | 6.1 | Jun 12 | Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap Affected: github.com/docker/docker/daemon <= 28.5.2; Docker Engine < 29.5.1; github.com/moby/moby/v2/daemon < 2.0.0-beta.14 |
Showing 5