Vendor
Docker
130 known vulnerabilities in products by Docker, 1 of them actively exploited (CISA KEV).
Key figures
130
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
26
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability In CISA KEValso in 1 other product | 7.8 | |
| High | CVE-2026-34040 | Moby: AuthZ plugin bypass with oversized request body | 8.8 | |
| High | CVE-2025-62725 | Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations | — | |
| Critical | CVE-2019-14271 | Docker: Code Injection | 9.8 | |
| High | CVE-2019-5736 | The Linux Foundation runc: security vulnerability | 8.6 | |
| Critical | CVE-2014-0048 | Docker.io: security vulnerability | 9.8 | |
| High | CVE-2014-9356 | Docker: Path Traversal | 8.6 | |
| Critical | CVE-2020-35184 | Docker Composer Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-29575 | Docker Elixir Alpine Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-35186 | Docker Adminer: security vulnerability | 9.8 | |
| Critical | CVE-2020-35185 | Docker Ghost Alpine Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2025-9074 | Docker Desktop allows unauthenticated access to Docker Engine API from containers | — | |
| Critical | CVE-2020-29591 | Docker Registry: security vulnerability | 9.8 | |
| Critical | CVE-2020-29580 | Docker Storm Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-29601 | Docker Notary Docker Image: security vulnerability | 9.8 | |
| High | CVE-2019-16884 | The Linux Foundation runc: security vulnerability | 7.5 | |
| Critical | CVE-2020-29581 | Docker Spiped Alpine Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-35195 | Docker Haproxy Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-35467 | Docker Docs: security vulnerability | 9.8 | |
| Critical | CVE-2020-35196 | Docker Rabbitmq Docker Image: security vulnerability | 9.8 | |
| Critical | CVE-2020-35197 | Docker Memcached Docker Image: security vulnerability | 9.8 | |
| High | CVE-2019-13509 | Docker: security vulnerability | 7.5 | |
| High | CVE-2018-15514 | Docker: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2018-15664 | Docker: Path Traversal | 7.5 | |
| High | CVE-2017-11468 | Docker Registry: Denial of Service | 7.5 |
News
Products
| Docker Desktop | 38 | 0 |
| Docker | 37 | 1 |
| Docker Desktop | 19 | 0 |
| Docker Sandboxes | 9 | 0 |
| Docker Engine | 6 | 0 |
| Docker Engine | 5 | 0 |
| Mcp-gateway | 3 | 0 |
| Model-runner | 3 | 0 |