D
Vendor security profile3 actively exploited CVEs
docker
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs23
Critical1
CISA KEV3
Public exploit4
Patch rate%17
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
2
0
3
3
0
2
5
7
CVE KEV
CVE severity distribution
23toplam CVE
Critical1 (4%)
High12 (52%)
Medium9 (39%)
Uncertain1 (4%)
Patch and exploitation view
%17
Verified patch
%13
CISA KEV
%17
Public exploit
4Patch available
0Partial
3Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
8.2
CVE-2026-106581
Docker Desktop for Windows installer failed to verify external packages
D
Patch status unknownEPSS %0
5.9
CVE-2026-105452
Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
D
Patch status unknownEPSS %0
5.9
CVE-2026-101998
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
D
Patch status unknownEPSS %0
6.7
CVE-2026-105570
Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
D
Patch status unknownEPSS %0
7.6
CVE-2026-92543
Docker Engine insecure-registry fallback via malicious DNS responses
D
Patch status unknownEPSS %0
6.9
CVE-2026-92542
Blind VXLAN injection into encrypted overlay networks from cluster peer
D
Patch status unknownEPSS %0
6.9
CVE-2026-103433
Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
D
Patch verifiedEPSS %0
8.5
CVE-2026-102490 Actively exploited
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
ZG
WorkaroundEPSS %1
8.7
CVE-2026-102489 Actively exploited
Undisclosed RCE in Zammad v6.3 and higher
ZG
WorkaroundEPSS %1
8.7
CVE-2026-79994
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
D
Patch verifiedEPSS %0