Product by Debian
Docker.io
11 known vulnerabilities in Docker.io (Debian), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-34040 | Moby: AuthZ plugin bypass with oversized request body | 8.8 | |
| Medium | CVE-2021-21285 | Docker daemon crash during image pull of malicious image | 6.5 | |
| Medium | CVE-2020-15257 | containerd-shim API Exposed to Host Network Containers | 5.2 | |
| Medium | CVE-2020-15157 | containerd can be coerced into leaking credentials during image pull | 6.1 | |
| Critical | CVE-2026-33747 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root | 8.4 | |
| High | CVE-2026-33748 | BuildKit Git URL subdir component can cause access to restricted files | 7.5 | |
| Medium | CVE-2021-21284 | privilege escalation in Moby | 6.8 | |
| High | CVE-2026-33997 | Moby: Off-by-one error in plugin privilege validation | 6.8 | |
| High | CVE-2026-42306 | Moby: Race condition in docker cp allows bind mount redirection to host path | 7.2 | |
| High | CVE-2026-41567 | Docker: `PUT /containers/{id}/archive` executes container binary on the host | 7.2 | |
| Medium | CVE-2026-41568 | Moby: Improper Neutralization of Script in an Error Message Web Page | 6.1 |