Docker

Latest CVEs · RSS

• CVE-2026-105445 2026-10-13 · CVSS 9.4
  An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a perso
• CVE-2026-106581 2026-10-09 · CVSS 8.2
  Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able
• CVE-2026-105452 2026-10-08 · CVSS 5.9
  Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials on
• CVE-2026-101998 2026-10-08 · CVSS 5.9
  Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affecte
• CVE-2026-105570 2026-10-08 · CVSS 6.7
  Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing trea
• CVE-2026-92543 2026-10-07 · CVSS 7.6
  Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDR
• CVE-2026-92542 2026-10-07 · CVSS 6.9
  The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sen
• CVE-2026-93321 2026-10-05 · CVSS 6.9
  A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
• CVE-2026-93315 2026-10-05 · CVSS 5.8
  When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build
• CVE-2026-103433 2026-10-05 · CVSS 6.9
  Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through
• CVE-2026-93326 2026-10-05 · CVSS 6.0
  A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look lik
• CVE-2026-93323 2026-10-05 · CVSS 6.8
  The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversiz
• CVE-2026-93322 2026-10-05 · CVSS 6.9
  A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
• CVE-2026-93320 2026-10-05 · CVSS 6.0
  BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootfu
• CVE-2026-93319 2026-10-05 · CVSS 5.7
  A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to
• CVE-2026-93318 2026-10-05 · CVSS 7.5
  A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised Di
• CVE-2026-93317 2026-10-05 · CVSS 5.9
  An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting sn
• CVE-2026-93316 2026-10-05 · CVSS 7.1
  If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
• CVE-2026-79994 2026-09-15 · CVSS 8.7
  The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pa
• CVE-2026-77179 2026-09-15 · CVSS 9.4
  On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest c
• CVE-2026-17106 2026-08-18 · CVSS 7.1
  The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations t
• CVE-2026-18171 2026-08-12 · CVSS 5.7
  Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is add
• CVE-2026-15793 2026-07-21 · CVSS 6.5
  BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious,
• CVE-2026-15792 2026-07-21 · CVSS 6.3
  A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
• CVE-2026-15791 2026-07-21 · CVSS 3.3
  A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete f