Docker Docker Engine vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20263

Newest CVEs

• CVE-2026-92543

  Docker Engine insecure-registry fallback via malicious DNS responses

  Docker · Docker Engine

  High7.6
• CVE-2026-92542

  Blind VXLAN injection into encrypted overlay networks from cluster peer

  Docker · Docker Engine

  Medium6.9
• CVE-2026-17106

  Tar extraction in moby/go-archive can write outside the destination directory via link following

  moby · go-archive

  High7.1
• CVE-2014-8179

  Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during…

  Docker · Docker Engine

  High7.5
• CVE-2014-8178

  Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for…

  Docker · Docker Engine

  Medium5.5