Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,893All CVEsplus 19,117 rejected
- 444Last 24 hours2,910 in the last 7 days
- 16,794Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 14 | 26 | 2 | 0 | 45 | 70 |
| 2025 | 1 | 3 | 6 | 1 | 0 | 11 | 25 |
| 2024 | 1 | 3 | 1 | 0 | 0 | 5 | 14 |
| 2023 | 0 | 6 | 3 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-121520 | Malicious client could set xattr value outside of BuildKit state directoryMoby · BuildKit | Medium4.5 |
| CVE-2026-121522 | Possible panic from Git source resolvermoby · BuildKit | Medium6.7 |
| CVE-2026-121541 | Bake filesystem path entitlements approval can be skipped in some multi-target buildsDocker · Docker Buildx | Medium5.6 |
| CVE-2026-121542 | Bake filesystem path entitlements approval can be skipped for path using basename prefixDocker · Docker Buildx | Low1.8 |
| CVE-2026-121614 | Docker Sandboxes host Git executes repository-controlled programsDocker · Docker Sandboxes | High7.1 |
| CVE-2026-93325 | Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker BuildxDocker · Docker Buildx | High7.3 |
| CVE-2026-112917 | Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallDocker · Docker Desktop | Critical9.2 |
| CVE-2026-103916 | Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryDocker · Docker Sandboxes | High8.4 |
| CVE-2026-114409 | Docker Desktop logs can expose stored third-party credentialsDocker · Docker Desktop | Medium5.7 |
| CVE-2026-105445 | Docker Hub account conversion could reassign an active personal access token to another userDocker · Docker Hub | Critical9.4 |
| CVE-2026-106581 | Docker Desktop for Windows installer failed to verify external packagesDocker · Docker Desktop | High8.2 |
| CVE-2026-105452 | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsDocker · Docker Sandboxes | Medium5.9 |
| CVE-2026-101998 | Fail-open response masking in Docker Sandboxes can expose proxy-managed credentialsDocker · Docker Sandboxes | Medium5.9 |
| CVE-2026-105570 | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostDocker · Docker Sandboxes | Medium6.7 |
| CVE-2026-92543 | Docker Engine insecure-registry fallback via malicious DNS responsesDocker · Docker Engine | High7.6 |
| CVE-2026-92542 | Blind VXLAN injection into encrypted overlay networks from cluster peerDocker · Docker Engine | Medium6.9 |
| CVE-2026-93321 | Malformed LLB file operation can crash buildkitdmoby · BuildKit | Medium6.9 |
| CVE-2026-93315 | BuildKit proxy CA cleanup can be disrupted by build stepsmoby · BuildKit | Medium5.8 |
| CVE-2026-103433 | Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsDocker · Docker Buildx | Medium6.9 |
| CVE-2026-93326 | Crafted Git build source can bypass certain policy validationmoby · BuildKit | Medium6.0 |
| CVE-2026-93323 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memorymoby · BuildKit | Medium6.8 |
| CVE-2026-93322 | Malformed MergeOp can crash the BuildKit daemonmoby · BuildKit | Medium6.9 |
| CVE-2026-93320 | BuildKit improperly handles special files in build snapshotsmoby · BuildKit | Medium6.0 |
| CVE-2026-93319 | A malicious frontend can cause a daemon panicmoby · BuildKit | Medium5.7 |
| CVE-2026-93318 | Cache poisoning via unvalidated image layer DiffIDsmoby · BuildKit | High7.5 |
| CVE-2026-93317 | Container blob cache can accept unverified contentmoby · BuildKit | Medium5.9 |
| CVE-2026-93316 | Starting daemon with --cdi-disabled flag can lead to panic on specific buildsmoby · BuildKit | High7.1 |
| CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker · Docker Sandboxes | High8.7 |
| CVE-2026-77179 | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker · Docker Sandboxes | Critical9.4 |
| CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link followingmoby · go-archive | High7.1 |
| CVE-2026-18171 | Docker Sandboxes read-only runtime mount writable through its shared-export aliasDocker · Docker Sandboxes | Medium5.7 |
| CVE-2026-15793 | Git source checkout from a bundle file could lead to command injectionmoby · BuildKit | Medium6.5 |
| CVE-2026-15792 | Possible panic when incorrect parameters sent from frontendmoby · BuildKit | Medium6.3 |
| CVE-2026-15791 | LLB file operation can be tricked to remove /tmp directory contentsmoby · BuildKit | Low3.3 |
| CVE-2026-15789 | Malicious client can bypass destination directory validation on local sources uploadmoby · BuildKit | Medium6.9 |
| CVE-2026-15788 | WCOW cache mount source selector resolves NTFS junctions outside of cache rootmoby · BuildKit | Medium5.6 |
| CVE-2026-12539 | Docker Sandboxes ICMP egress restriction bypass after daemon restartDocker · Docker Sandboxes | Medium5.1 |
| CVE-2026-12039 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionDocker · Docker Sandboxes | Medium5.7 |
| CVE-2026-8936 | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMDocker · Docker Desktop | High8.2 |
| CVE-2026-5843 | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingDocker · Docker Desktop | High8.8 |
| CVE-2026-5817 | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsDocker · Docker Desktop | High8.8 |
| CVE-2026-6406 | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagDocker · Docker Desktop | High8.8 |
| CVE-2025-15558 | Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityDocker · Docker CLI | High7.0 |
| CVE-2026-2664 | Out of bounds read vulnerability in grpcfuse kernel moduleDocker · Docker Desktop | Medium6.8 |
| CVE-2025-14740 | Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesDocker Inc. · Docker Desktop | Medium6.7 |
| CVE-2025-13743 | Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsDocker · Docker Desktop | Low2.4 |
| CVE-2025-9164 | Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsDocker · Docker Desktop | High8.8 |
| CVE-2025-10657 | Docker Desktop with ECI Fails to Enforce Socket Command RestrictionsDocker · Docker Desktop | High8.7 |
| CVE-2025-9074 | Docker Desktop allows unauthenticated access to Docker Engine API from containersDocker · Docker Desktop | Critical9.3 |
| CVE-2025-6587 | Exposure of system environment variables in Docker Desktop diagnostic logsDocker · Docker Desktop | Medium5.2 |