Product by Open Source
Docker
5 known vulnerabilities in Docker (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | — | |
| High | CVE-2026-92543 | Docker Engine insecure-registry fallback via malicious DNS responses | — | |
| High | CVE-2026-42306 | Moby: Race condition in docker cp allows bind mount redirection to host path | 7.2 | |
| High | CVE-2026-41567 | Docker: `PUT /containers/{id}/archive` executes container binary on the host | 7.2 | |
| Medium | CVE-2026-41568 | Moby: Improper Neutralization of Script in an Error Message Web Page | 6.1 |