Product by Mobyproject
Moby Project Moby
21 known vulnerabilities in Moby Project Moby (Mobyproject), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-28840 | moby/moby's dockerd daemon encrypted overlay network may be unauthenticated | 7.5 | |
| Medium | CVE-2021-41091 | Insufficiently restricted permissions on data directory in Docker Engine | 6.3 | |
| Medium | CVE-2023-28842 | moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated | 6.8 | |
| Medium | CVE-2017-16539 | Moby Project Moby: security vulnerability | 5.9 | |
| High | CVE-2024-36623 | Moby Project Moby: Race Condition | 8.1 | |
| Medium | CVE-2018-10892 | Docker: Execution with Unnecessary Privileges | 6.3 | |
| High | CVE-2018-12608 | Moby Project Moby: security vulnerability | 7.5 | |
| Medium | CVE-2024-36620 | Moby Project Moby: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2022-36109 | Moby vulnerability relating to supplementary group permissions | 5.3 | |
| Medium | CVE-2024-36621 | Moby Project Moby: Race Condition | 6.5 | |
| Medium | CVE-2023-28841 | moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted | 6.8 | |
| High | CVE-2024-29018 | External DNS requests from 'internal' networks could lead to data exfiltration | 5.9 | |
| High | CVE-2026-42306 | Moby: Race condition in docker cp allows bind mount redirection to host path | 7.2 | |
| Medium | CVE-2026-41568 | Moby: Improper Neutralization of Script in an Error Message Web Page | 6.1 | |
| Medium | CVE-2022-24769 | Default inheritable capabilities for linux container should be empty | 5.9 | |
| High | CVE-2024-24557 | Moby classic builder cache poisoning | 6.9 | |
| Medium | CVE-2025-54388 | Moby's Firewalld reload makes published container ports accessible from remote hosts | 4.6 | |
| Medium | CVE-2024-32473 | Moby IPv6 enabled on IPv4-only network interfaces | 4.7 | |
| Medium | CVE-2022-27652 | Cri-o: Incorrect Default Permissions | 5.3 | |
| Medium | CVE-2025-54410 | Moby's Firewalld reload removes bridge network isolation | 3.3 | |
| Medium | CVE-2021-41089 | `docker cp` allows unexpected chmod of host files | 2.8 |