[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIptvCE1qfnm2x95BPP5B-po7hQmTpty49BndcKVgpqA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":147,"kevVulnerabilities":207,"topProductsByCves":213,"seoMetadata":224,"meta":233},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":146},8248,"docker",31,101,1,1184,"2025-04-28","d",[16,21,28,33,39,44,49,53,57,61,65,70,74,79,84,88,92,95,99,102,106,109,112,116,120,125,129,132,136,139,142],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},38827,193,53,"2022-09-06",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},38828,"docker_desktop",121,14,0,"2023-09-25",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":13},38826,"desktop",135,12,{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":26,"last_cve_update":38},38825,"cs_engine",6,2,"2019-12-17",{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":26,"last_cve_update":43},38842,"notary",3,"2018-03-31",{"id":45,"product_name":46,"version_count":47,"cve_count":37,"kev_count":26,"last_cve_update":48},38834,"engine",124,"2020-06-02",{"id":50,"product_name":51,"version_count":11,"cve_count":37,"kev_count":26,"last_cve_update":52},38837,"libcontainer","2015-05-18",{"id":54,"product_name":55,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":56},38832,"docs","2020-12-15",{"id":58,"product_name":59,"version_count":25,"cve_count":11,"kev_count":26,"last_cve_update":60},38833,"elixir_alpine_docker_image","2020-12-08",{"id":62,"product_name":63,"version_count":64,"cve_count":11,"kev_count":26,"last_cve_update":60},38848,"storm_docker_image",21,{"id":66,"product_name":67,"version_count":68,"cve_count":11,"kev_count":26,"last_cve_update":69},38819,"command_line_interface",141,"2021-10-04",{"id":71,"product_name":72,"version_count":9,"cve_count":11,"kev_count":26,"last_cve_update":73},38821,"composer_docker_image","2020-12-17",{"id":75,"product_name":76,"version_count":77,"cve_count":11,"kev_count":26,"last_cve_update":78},38823,"credential_helpers",13,"2019-07-29",{"id":80,"product_name":81,"version_count":82,"cve_count":11,"kev_count":26,"last_cve_update":83},38824,"crux_linux_docker_image",4,"2020-12-02",{"id":85,"product_name":86,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":87},38830,"docker-py","2014-11-17",{"id":89,"product_name":90,"version_count":26,"cve_count":11,"kev_count":26,"last_cve_update":91},38831,"docker_registry","2017-07-20",{"id":93,"product_name":94,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":73},38840,"memcached_docker_image",{"id":96,"product_name":97,"version_count":98,"cve_count":11,"kev_count":26,"last_cve_update":60},38843,"notary_docker_image",10,{"id":100,"product_name":101,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":73},38844,"rabbitmq_docker_image",{"id":103,"product_name":104,"version_count":36,"cve_count":11,"kev_count":26,"last_cve_update":105},38845,"registry","2020-12-11",{"id":107,"product_name":108,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":60},38847,"spiped_alpine_docker_image",{"id":110,"product_name":111,"version_count":98,"cve_count":11,"kev_count":26,"last_cve_update":73},38818,"adminer",{"id":113,"product_name":114,"version_count":115,"cve_count":11,"kev_count":26,"last_cve_update":73},38835,"ghost_alpine_docker_image",130,{"id":117,"product_name":118,"version_count":119,"cve_count":11,"kev_count":26,"last_cve_update":73},38836,"haproxy_docker_image",8,{"id":121,"product_name":122,"version_count":123,"cve_count":11,"kev_count":26,"last_cve_update":124},38838,"machine",30,"2023-11-07",{"id":126,"product_name":127,"version_count":11,"cve_count":26,"kev_count":26,"last_cve_update":128},38829,"docker_enterprise",null,{"id":130,"product_name":131,"version_count":36,"cve_count":26,"kev_count":26,"last_cve_update":128},38846,"spiped",{"id":133,"product_name":134,"version_count":135,"cve_count":26,"kev_count":26,"last_cve_update":128},38841,"model_runner",66,{"id":137,"product_name":138,"version_count":77,"cve_count":26,"kev_count":26,"last_cve_update":128},38822,"credential-helpers",{"id":140,"product_name":141,"version_count":9,"cve_count":26,"kev_count":26,"last_cve_update":128},38820,"composer",{"id":143,"product_name":144,"version_count":145,"cve_count":26,"kev_count":26,"last_cve_update":128},38839,"mcp_gateway",61,"Docker is a technology vendor with 31 tracked products and 101 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[148,157,163,169,174,180,185,191,196,202],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":156},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,"v3.1","High",false,0.9857,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":162},"CVE-2019-15752","Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.","2019-08-28",7.8,0.29628,{"cveId":164,"description":165,"publishedDate":78,"cvssScore":166,"cvssVersion":153,"severity":167,"isKev":155,"epssScore":168},"CVE-2019-14271","In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.",9.8,"Critical",0.18828,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":166,"cvssVersion":153,"severity":167,"isKev":155,"epssScore":173},"CVE-2014-0048","An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.","2020-01-02",0.06508,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":98,"cvssVersion":178,"severity":167,"isKev":155,"epssScore":179},"CVE-2014-9357","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.","2014-12-16","v2",0.06452,{"cveId":181,"description":182,"publishedDate":183,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":184},"CVE-2014-9356","Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.","2019-12-02",0.04923,{"cveId":186,"description":187,"publishedDate":188,"cvssScore":189,"cvssVersion":178,"severity":154,"isKev":155,"epssScore":190},"CVE-2014-6407","Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.","2014-12-12",7.5,0.04909,{"cveId":192,"description":193,"publishedDate":194,"cvssScore":189,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":195},"CVE-2019-16884","runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer\u002Frootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a \u002Fproc directory.","2019-09-25",0.04409,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":189,"cvssVersion":200,"severity":154,"isKev":155,"epssScore":201},"CVE-2019-13509","In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.","2019-07-18","v3.0",0.03653,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":189,"cvssVersion":200,"severity":154,"isKev":155,"epssScore":206},"CVE-2018-15664","In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon\u002Farchive.go does not do archive operations on a frozen filesystem (or from within a chroot).","2019-05-23",0.03398,[208],{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":162,"cisaVulnName":209,"cisaDateAdded":210,"cisaShortDescription":211,"cisaRequiredAction":212},"Docker Desktop Community Edition Privilege Escalation Vulnerability","2021-11-03","Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\.","Apply updates per vendor instructions.",[214,215,216,217,218,219,220,221,222,223],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":13},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":26,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":26,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":37,"kev_count":26,"last_cve_update":48},{"id":50,"product_name":51,"version_count":11,"cve_count":37,"kev_count":26,"last_cve_update":52},{"id":54,"product_name":55,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":56},{"id":58,"product_name":59,"version_count":25,"cve_count":11,"kev_count":26,"last_cve_update":60},{"id":62,"product_name":63,"version_count":64,"cve_count":11,"kev_count":26,"last_cve_update":60},{"title":225,"metaDescription":226,"keywords":227,"structuredData":228},"Docker - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Docker covering 31 products with 101 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Docker vulnerabilities, Docker security, Docker CVE, Docker threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Docker KEV, Docker exploited vulnerabilities",{"@context":229,"@type":230,"name":231,"description":226,"url":232},"https:\u002F\u002Fschema.org","Organization","Docker","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fdocker",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":234,"apiVersion":235},"2026-10-28T13:58:06.840Z","3.0"]