MO
Product
Moby
21
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 15Low 0
Watch
Add Moby to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28840 | 8.7 | Apr 4 | Moby is an open source container framework developed by Docker Inc Affected: 1.12.0 before 20.10.24; 23.0.0 before 23.0.3 |
| CVE-2024-36623 | 8.1 | Nov 29 | moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data… Affected: through 25.0.3 |
| CVE-2024-24557 | 7.8 | Feb 1 | Moby is an open-source project created by Docker to enable software containerization Affected: before 24.0.9; 25.0.0 before 25.0.2 |
| CVE-2024-29018 | 7.5 | Mar 20 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes Affected: before 23.0.11; 24.0.0 before 25.0.5; 26.0.0; 26.0.0; 26.0.0 |
| CVE-2018-12608 | 7.5 | Sep 10 | An issue was discovered in Docker Moby before 17.06.0 Affected: before 17.06.0 |
| CVE-2026-42306 | 7.2 | Jun 12 | Moby: Race condition in docker cp allows bind mount redirection to host path Affected: through 28.5.2 |
| CVE-2023-28842 | 6.8 | Apr 4 | Moby) is an open source container framework developed by Docker Inc Affected: 1.12.0 before 20.10.24; 23.0.0 before 23.0.3 |
| CVE-2023-28841 | 6.8 | Apr 4 | Moby is an open source container framework developed by Docker Inc Affected: 1.12.0 before 20.10.24; 23.0.0 before 23.0.3 |
| CVE-2024-36621 | 6.5 | Nov 29 | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go Affected: 25.0.5 |
| CVE-2024-36620 | 6.5 | Nov 29 | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go Affected: 25.0.0 through 26.0.2 |
| CVE-2024-32473 | 6.5 | Apr 18 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes Affected: 26.0.0 before 26.0.2 |
| CVE-2022-36109 | 6.3 | Sep 9 | Moby is an open-source project created by Docker to enable software containerization Affected: before 20.10.18 |
| CVE-2021-41091 | 6.3 | Oct 4 | Moby is an open-source project created by Docker to enable software containerization Affected: before 20.10.9 |
| CVE-2021-41089 | 6.3 | Oct 4 | Moby is an open-source project created by Docker to enable software containerization Affected: before 20.10.9 |
| CVE-2026-41568 | 6.1 | Jun 12 | Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap Affected: through 28.5.2 |
| CVE-2022-24769 | 5.9 | Mar 24 | Moby is an open-source project created by Docker to enable and accelerate software containerization Affected: before 20.10.14 |
| CVE-2017-16539 | 5.9 | Nov 4 | The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain… Affected: through 17.03.2 |
| CVE-2022-27652 | 5.3 | Apr 18 | A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions Affected: before 20.10.14 |
| CVE-2018-10892 | 5.3 | Jul 6 | The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames Affected: 1.11 through 17.03.2 |
| CVE-2025-54410 | 5.2 | Jul 30 | Moby is an open source container framework developed by Docker Inc Affected: before 25.0.13 |
| CVE-2025-54388 | 4.6 | Jul 30 | Moby is an open source container framework developed by Docker Inc Affected: 28.2.0 before 28.3.3 |
Showing 21