Vulnerabilities in docker

31 results
Vexday analysis

Docker apresenta 7 vulnerabilidades catalogadas, com apenas 1 publicada nos últimos 90 dias, indicando risco contido e não crítico. Nenhuma das falhas está sob exploração ativa (KEV) ou classificada como crítica (CVSS), sendo a fraqueza dominante relacionada a falhas de controle de acesso (CWE-749). O panorama atual sugere exposição baixa, embora a manutenção rotineira de atualizações seja recomendada.

CVE-2025-0495MEDIUMSecrets leakage to telemetry endpoint via cache backend configuration via buildxEPSS 0.2%CVE-2025-1696MEDIUMExposure of Proxy Credentials in Docker Desktop LogsEPSS 0.2%CVE-2026-41567HIGHDocker: `PUT /containers/{id}/archive` executes container binary on the hostEPSS 0.2%CVE-2025-3911MEDIUMExposure in Docker Desktop logs of environment variables configured for running containersEPSS 0.2%CVE-2026-12039MEDIUMDocker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionEPSS 0.1%CVE-2025-4095MEDIUMRegistry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profileEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%CVE-2025-10657HIGHDocker Desktop with ECI Fails to Enforce Socket Command RestrictionsEPSS 0.1%CVE-2025-6587MEDIUMExposure of system environment variables in Docker Desktop diagnostic logsEPSS 0.1%CVE-2026-8936HIGHUnbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMEPSS 0.1%CVE-2025-9164HIGHMultiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsEPSS 0.1%