[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIptvCE1qfnm2x95BPP5B-po7hQmTpty49BndcKVgpqA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":147,"kevVulnerabilities":207,"topProductsByCves":230,"seoMetadata":241,"meta":250},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":146},8248,"docker",31,101,1,1184,"2025-04-28","d",[16,21,28,33,39,44,49,53,57,61,65,70,74,79,84,88,92,95,99,102,106,109,112,116,120,125,129,132,136,139,142],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},38827,193,53,"2022-09-06",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},38828,"docker_desktop",121,14,0,"2023-09-25",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":13},38826,"desktop",135,12,{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":26,"last_cve_update":38},38825,"cs_engine",6,2,"2019-12-17",{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":26,"last_cve_update":43},38842,"notary",3,"2018-03-31",{"id":45,"product_name":46,"version_count":47,"cve_count":37,"kev_count":26,"last_cve_update":48},38834,"engine",124,"2020-06-02",{"id":50,"product_name":51,"version_count":11,"cve_count":37,"kev_count":26,"last_cve_update":52},38837,"libcontainer","2015-05-18",{"id":54,"product_name":55,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":56},38832,"docs","2020-12-15",{"id":58,"product_name":59,"version_count":25,"cve_count":11,"kev_count":26,"last_cve_update":60},38833,"elixir_alpine_docker_image","2020-12-08",{"id":62,"product_name":63,"version_count":64,"cve_count":11,"kev_count":26,"last_cve_update":60},38848,"storm_docker_image",21,{"id":66,"product_name":67,"version_count":68,"cve_count":11,"kev_count":26,"last_cve_update":69},38819,"command_line_interface",141,"2021-10-04",{"id":71,"product_name":72,"version_count":9,"cve_count":11,"kev_count":26,"last_cve_update":73},38821,"composer_docker_image","2020-12-17",{"id":75,"product_name":76,"version_count":77,"cve_count":11,"kev_count":26,"last_cve_update":78},38823,"credential_helpers",13,"2019-07-29",{"id":80,"product_name":81,"version_count":82,"cve_count":11,"kev_count":26,"last_cve_update":83},38824,"crux_linux_docker_image",4,"2020-12-02",{"id":85,"product_name":86,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":87},38830,"docker-py","2014-11-17",{"id":89,"product_name":90,"version_count":26,"cve_count":11,"kev_count":26,"last_cve_update":91},38831,"docker_registry","2017-07-20",{"id":93,"product_name":94,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":73},38840,"memcached_docker_image",{"id":96,"product_name":97,"version_count":98,"cve_count":11,"kev_count":26,"last_cve_update":60},38843,"notary_docker_image",10,{"id":100,"product_name":101,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":73},38844,"rabbitmq_docker_image",{"id":103,"product_name":104,"version_count":36,"cve_count":11,"kev_count":26,"last_cve_update":105},38845,"registry","2020-12-11",{"id":107,"product_name":108,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":60},38847,"spiped_alpine_docker_image",{"id":110,"product_name":111,"version_count":98,"cve_count":11,"kev_count":26,"last_cve_update":73},38818,"adminer",{"id":113,"product_name":114,"version_count":115,"cve_count":11,"kev_count":26,"last_cve_update":73},38835,"ghost_alpine_docker_image",130,{"id":117,"product_name":118,"version_count":119,"cve_count":11,"kev_count":26,"last_cve_update":73},38836,"haproxy_docker_image",8,{"id":121,"product_name":122,"version_count":123,"cve_count":11,"kev_count":26,"last_cve_update":124},38838,"machine",30,"2023-11-07",{"id":126,"product_name":127,"version_count":11,"cve_count":26,"kev_count":26,"last_cve_update":128},38829,"docker_enterprise",null,{"id":130,"product_name":131,"version_count":36,"cve_count":26,"kev_count":26,"last_cve_update":128},38846,"spiped",{"id":133,"product_name":134,"version_count":135,"cve_count":26,"kev_count":26,"last_cve_update":128},38841,"model_runner",66,{"id":137,"product_name":138,"version_count":77,"cve_count":26,"kev_count":26,"last_cve_update":128},38822,"credential-helpers",{"id":140,"product_name":141,"version_count":9,"cve_count":26,"kev_count":26,"last_cve_update":128},38820,"composer",{"id":143,"product_name":144,"version_count":145,"cve_count":26,"kev_count":26,"last_cve_update":128},38839,"mcp_gateway",61,"Docker is a technology vendor with 31 tracked products and 101 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[148,157,163,169,174,180,185,191,196,202],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":156},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,"v3.1","High",false,0.98452,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":162},"CVE-2019-15752","Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.","2019-08-28",7.8,0.48628,{"cveId":164,"description":165,"publishedDate":78,"cvssScore":166,"cvssVersion":153,"severity":167,"isKev":155,"epssScore":168},"CVE-2019-14271","In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.",9.8,"Critical",0.18828,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":166,"cvssVersion":153,"severity":167,"isKev":155,"epssScore":173},"CVE-2014-0048","An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.","2020-01-02",0.07276,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":98,"cvssVersion":178,"severity":167,"isKev":155,"epssScore":179},"CVE-2014-9357","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.","2014-12-16","v2",0.06202,{"cveId":181,"description":182,"publishedDate":183,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":184},"CVE-2014-9356","Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.","2019-12-02",0.04923,{"cveId":186,"description":187,"publishedDate":188,"cvssScore":189,"cvssVersion":178,"severity":154,"isKev":155,"epssScore":190},"CVE-2014-6407","Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.","2014-12-12",7.5,0.04909,{"cveId":192,"description":193,"publishedDate":194,"cvssScore":189,"cvssVersion":153,"severity":154,"isKev":155,"epssScore":195},"CVE-2019-16884","runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer\u002Frootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a \u002Fproc directory.","2019-09-25",0.04409,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":189,"cvssVersion":200,"severity":154,"isKev":155,"epssScore":201},"CVE-2019-13509","In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.","2019-07-18","v3.0",0.03653,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":189,"cvssVersion":200,"severity":154,"isKev":155,"epssScore":206},"CVE-2018-15664","In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon\u002Farchive.go does not do archive operations on a frozen filesystem (or from within a chroot).","2019-05-23",0.03427,[208,219,225],{"cveId":209,"description":210,"publishedDate":211,"cvssScore":212,"cvssVersion":213,"severity":167,"isKev":4,"epssScore":214,"cisaVulnName":215,"cisaDateAdded":216,"cisaShortDescription":217,"cisaRequiredAction":218},"CVE-2026-102489","Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.","2026-09-30",9.4,"v4.0",0.01255,"Zammad GmbH Zammad Session Fixation Vulnerability","2026-10-02","Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":220,"description":221,"publishedDate":211,"cvssScore":212,"cvssVersion":213,"severity":167,"isKev":4,"epssScore":222,"cisaVulnName":223,"cisaDateAdded":216,"cisaShortDescription":224,"cisaRequiredAction":218},"CVE-2026-102490","Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.",0.0055,"Zammad GmbH Zammad Improper Privilege Management Vulnerability","Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.",{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":162,"cisaVulnName":226,"cisaDateAdded":227,"cisaShortDescription":228,"cisaRequiredAction":229},"Docker Desktop Community Edition Privilege Escalation Vulnerability","2021-11-03","Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\.","Apply updates per vendor instructions.",[231,232,233,234,235,236,237,238,239,240],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":26,"last_cve_update":13},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":26,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":26,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":37,"kev_count":26,"last_cve_update":48},{"id":50,"product_name":51,"version_count":11,"cve_count":37,"kev_count":26,"last_cve_update":52},{"id":54,"product_name":55,"version_count":11,"cve_count":11,"kev_count":26,"last_cve_update":56},{"id":58,"product_name":59,"version_count":25,"cve_count":11,"kev_count":26,"last_cve_update":60},{"id":62,"product_name":63,"version_count":64,"cve_count":11,"kev_count":26,"last_cve_update":60},{"title":242,"metaDescription":243,"keywords":244,"structuredData":245},"Docker - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Docker covering 31 products with 101 tracked vulnerabilities including 2 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Docker vulnerabilities, Docker security, Docker CVE, Docker threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Docker KEV, Docker exploited vulnerabilities",{"@context":246,"@type":247,"name":248,"description":243,"url":249},"https:\u002F\u002Fschema.org","Organization","Docker","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdocker",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":251,"apiVersion":252},"2026-10-17T21:28:19.882Z","3.0"]