M
Vendor security profile
moby
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs20
Critical0
CISA KEV0
Public exploit1
Patch rate%70
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
1
1
0
1
0
4
0
13
CVE KEV
CVE severity distribution
20toplam CVE
High7 (35%)
Medium12 (60%)
Low1 (5%)
Patch and exploitation view
%70
Verified patch
%0
CISA KEV
%5
Public exploit
14Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.5
CVE-2026-61801
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
M
Patch status unknownEPSS %0
7.6
CVE-2026-92543
Docker Engine insecure-registry fallback via malicious DNS responses
D
Patch status unknownEPSS %0
6.9
CVE-2026-92542
Blind VXLAN injection into encrypted overlay networks from cluster peer
D
Patch status unknownEPSS %0
6.9
CVE-2026-93321
Malformed LLB file operation can crash buildkitd
M
Patch verifiedEPSS %0
5.8
CVE-2026-93315
BuildKit proxy CA cleanup can be disrupted by build steps
M
Patch verifiedEPSS %0
6.0
CVE-2026-93326
Crafted Git build source can bypass certain policy validation
M
Patch verifiedEPSS %0
6.8
CVE-2026-93323
Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
M
Patch verifiedEPSS %0
6.9
CVE-2026-93322
Malformed MergeOp can crash the BuildKit daemon
M
Patch verifiedEPSS %0
6.0
CVE-2026-93320
BuildKit improperly handles special files in build snapshots
M
Patch verifiedEPSS %0
5.7
CVE-2026-93319
A malicious frontend can cause a daemon panic
M
Patch verifiedEPSS %0