Aggregates CVE and security vulnerability intelligence across all Docker-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Disclosed issues often relate to vendor risk input validation, vendor risk cross-site scripting, and vendor risk file inclusion; exposure may include vendor impact session compromise in vendor surface image processing contexts.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2014-5282 | Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'. | [email protected] | 8.1 | 1.35% | 2018-02-06 | 2026-06-16 |
| CVE-2017-14992 | Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing. | [email protected] | 6.5 | 2.47% | 2017-11-01 | 2026-06-16 |
| CVE-2014-0047 | Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. | [email protected] | 7.8 | 0.39% | 2017-10-06 | 2026-06-16 |
| CVE-2017-11468 | Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint. | [email protected] | 7.5 | 3.19% | 2017-07-20 | 2026-06-16 |
| CVE-2016-9962 | RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container. | [email protected] | 6.4 | 0.36% | 2017-01-31 | 2026-06-16 |
| CVE-2016-6595 | The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret t | [email protected] | 6.5 | 2.45% | 2017-01-04 | 2026-06-16 |
| CVE-2016-8867 | Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes. | [email protected] | 7.5 | 2.75% | 2016-10-28 | 2026-06-16 |
| CVE-2016-3697 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container. | [email protected] | 7.8 | 0.39% | 2016-06-01 | 2026-06-16 |
| CVE-2015-3631 | Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc. | [email protected] | 3.6 | 0.57% | 2015-05-18 | 2026-06-16 |
| CVE-2015-3630 | Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image. | [email protected] | 7.2 | 0.55% | 2015-05-18 | 2026-06-16 |
| CVE-2015-3629 | Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container. | [email protected] | 7.8 | 0.60% | 2015-05-18 | 2026-06-16 |
| CVE-2015-3627 | Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image. | [email protected] | 7.2 | 0.61% | 2015-05-18 | 2026-06-16 |
| CVE-2014-9358 | Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications." | [email protected] | 6.4 | 2.53% | 2014-12-16 | 2026-06-16 |
| CVE-2014-9357 | Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction. | [email protected] | 10.0 | 6.45% | 2014-12-16 | 2026-06-16 |
| CVE-2014-6408 | Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image. | [email protected] | 5.0 | 3.14% | 2014-12-12 | 2026-06-16 |
| CVE-2014-6407 | Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation. | [email protected] | 7.5 | 4.91% | 2014-12-12 | 2026-06-16 |
| CVE-2014-5277 | Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic. | [email protected] | 5.0 | 1.87% | 2014-11-17 | 2026-06-16 |
| CVE-2014-3499 | Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors. | [email protected] | 7.2 | 0.39% | 2014-07-11 | 2026-06-16 |