MO
Vendor
Mobyproject
40
CVEs
0
On KEV
0
New 30D
Products
MO8.7
Moby
Mobyproject
21 CVEs0 on KEV0 new
BU9.8
Buildkit
Mobyproject
12 CVEs0 on KEV0 new
HY7.8
Hyperkit
Mobyproject
5 CVEs0 on KEV0 new
MO7.2
Moby/v2
Mobyproject
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15793 | BU Buildkit Mobyproject | 7.5 | Jul 21 | Git source checkout from a bundle file could lead to command injection |
| CVE-2026-15792 | BU Buildkit Mobyproject | 7.5 | Jul 21 | Possible panic when incorrect parameters sent from frontend |
| CVE-2026-15791 | BU Buildkit Mobyproject | 7.5 | Jul 21 | LLB file operation can be tricked to remove /tmp directory contents |
| CVE-2026-15789 | BU Buildkit Mobyproject | 7.5 | Jul 21 | Malicious client can bypass destination directory validation on local sources upload |
| CVE-2026-15788 | BU Buildkit Mobyproject | 7.5 | Jul 20 | WCOW cache mount source selector resolves NTFS junctions outside of cache root |
| CVE-2026-42306 | MO Moby Mobyproject | 7.2 | Jun 12 | Moby: Race condition in docker cp allows bind mount redirection to host path |
| CVE-2026-41568 | MO Moby Mobyproject | 6.1 | Jun 12 | Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap |
| CVE-2026-33748 | BU Buildkit Mobyproject | 7.5 | Mar 27 | BuildKit Git URL subdir component can cause access to restricted files |
| CVE-2026-33747 | BU Buildkit Mobyproject | 9.8 | Mar 27 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root |
| CVE-2025-54410 | MO Moby Mobyproject | 5.2 | Jul 30 | Moby is an open source container framework developed by Docker Inc |
| CVE-2025-54388 | MO Moby Mobyproject | 4.6 | Jul 30 | Moby is an open source container framework developed by Docker Inc |
| CVE-2024-36623 | MO Moby Mobyproject | 8.1 | Nov 29 | moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data… |
| CVE-2024-36621 | MO Moby Mobyproject | 6.5 | Nov 29 | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go |
| CVE-2024-36620 | MO Moby Mobyproject | 6.5 | Nov 29 | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go |
| CVE-2024-32473 | MO Moby Mobyproject | 6.5 | Apr 18 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes |
| CVE-2024-29018 | MO Moby Mobyproject | 7.5 | Mar 20 | Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes |
| CVE-2024-24557 | MO Moby Mobyproject | 7.8 | Feb 1 | Moby is an open-source project created by Docker to enable software containerization |
| CVE-2024-23653 | BU Buildkit Mobyproject | 9.8 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner |
| CVE-2024-23652 | BU Buildkit Mobyproject | 9.1 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner |
| CVE-2024-23651 | BU Buildkit Mobyproject | 7.4 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner |
| CVE-2024-23650 | BU Buildkit Mobyproject | 5.3 | Jan 31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner |
| CVE-2023-28842 | MO Moby Mobyproject | 6.8 | Apr 4 | Moby) is an open source container framework developed by Docker Inc |
| CVE-2023-28841 | MO Moby Mobyproject | 6.8 | Apr 4 | Moby is an open source container framework developed by Docker Inc |
| CVE-2023-28840 | MO Moby Mobyproject | 8.7 | Apr 4 | Moby is an open source container framework developed by Docker Inc |
| CVE-2023-26054 | BU Buildkit Mobyproject | 6.5 | Mar 6 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner |
| CVE-2021-32847 | HY Hyperkit Mobyproject | 6.5 | Feb 20 | HyperKit is a toolkit for embedding hypervisor capabilities in an application |
| CVE-2021-32846 | HY Hyperkit Mobyproject | 7.8 | Feb 17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application |
| CVE-2021-32845 | HY Hyperkit Mobyproject | 7.8 | Feb 17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application |
| CVE-2021-32844 | HY Hyperkit Mobyproject | 5.5 | Feb 17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application |
| CVE-2021-32843 | HY Hyperkit Mobyproject | 5.5 | Feb 17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application |
| CVE-2022-36109 | MO Moby Mobyproject | 6.3 | Sep 9 | Moby is an open-source project created by Docker to enable software containerization |
| CVE-2022-27652 | MO Moby Mobyproject | 5.3 | Apr 18 | A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions |
| CVE-2022-24769 | MO Moby Mobyproject | 5.9 | Mar 24 | Moby is an open-source project created by Docker to enable and accelerate software containerization |
| CVE-2021-41091 | MO Moby Mobyproject | 6.3 | Oct 4 | Moby is an open-source project created by Docker to enable software containerization |
| CVE-2021-41089 | MO Moby Mobyproject | 6.3 | Oct 4 | Moby is an open-source project created by Docker to enable software containerization |
| CVE-2018-12608 | MO Moby Mobyproject | 7.5 | Sep 10 | An issue was discovered in Docker Moby before 17.06.0 |
| CVE-2018-10892 | MO Moby Mobyproject | 5.3 | Jul 6 | The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames |
| CVE-2017-16539 | MO Moby Mobyproject | 5.9 | Nov 4 | The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain… |
