Vulnerabilidades em Docker
51 resultadosAnálise Vexday
Docker apresenta 24 vulnerabilidades conhecidas na base, com 2 classificadas como críticas, mas nenhuma sob ataque ativo documentado até o momento. A fraqueza dominante (CWE-532 - Log Information Disclosure) sugere exposição de dados sensíveis em logs, um risco operacional significativo. O ritmo de descobertas permanece relevante, com 6 CVEs publicadas nos últimos 90 dias, indicando superfície de ataque em evolução contínua.
CVE-2026-93325HIGHBake filesystem entitlement consent is skipped under --progress=rawjson in Docker BuildxEPSS 0.1%CVE-2026-121614HIGHDocker Sandboxes host Git executes repository-controlled programsEPSS 0.1%CVE-2026-105570MEDIUMDocker Sandboxes OAuth response masking could be bypassed with a case-variant token hostEPSS 0.1%CVE-2026-8936HIGHUnbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMEPSS 0.1%CVE-2026-121541MEDIUMBake filesystem path entitlements approval can be skipped in some multi-target buildsEPSS 0.1%CVE-2025-9164HIGHMultiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsEPSS 0.1%CVE-2026-114409MEDIUMDocker Desktop logs can expose stored third-party credentialsEPSS 0.1%CVE-2026-12039MEDIUMDocker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionEPSS 0.1%CVE-2026-92543HIGHDocker Engine insecure-registry fallback via malicious DNS responsesEPSS 0.1%CVE-2026-106581HIGHDocker Desktop for Windows installer failed to verify external packagesEPSS 0.1%CVE-2026-92542MEDIUMBlind VXLAN injection into encrypted overlay networks from cluster peerEPSS 0.1%