Product by Docker
Docker Sandboxes
9 known vulnerabilities in Docker Sandboxes (Docker), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | — | |
| Critical | CVE-2026-77179 | Docker Sandboxes: Link Following | — | |
| High | CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race | — | |
| Medium | CVE-2026-105570 | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host | — | |
| Medium | CVE-2026-101998 | Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials | — | |
| Medium | CVE-2026-105452 | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts | — | |
| Medium | CVE-2026-18171 | Docker Sandboxes read-only runtime mount writable through its shared-export alias | — | |
| Medium | CVE-2026-12539 | Docker Sandboxes ICMP egress restriction bypass after daemon restart | — | |
| Medium | CVE-2026-12039 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution | — |