Docker / Docker Sandboxes
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race | HIGH | 8.7 | Sep 15, 2026 |
| CVE-2026-77179 | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback | CRITICAL | 9.4 | Sep 15, 2026 |
| CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | HIGH | 7.1 | Aug 18, 2026 |
| CVE-2026-18171 | Docker Sandboxes read-only runtime mount writable through its shared-export alias | MEDIUM | 5.7 | Aug 12, 2026 |
| CVE-2026-12539 | Docker Sandboxes ICMP egress restriction bypass after daemon restart | MEDIUM | 5.7 | Jun 18, 2026 |
| CVE-2026-12039 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution | MEDIUM | 5.7 | Jun 18, 2026 |
Showing 1 to 6 of 6 CVEs