Docker vulnerabilities
5 known CVE vulnerabilities in Docker, translated and rated.
- CVE-2014-0047High
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage.
- CVE-2014-9357High
Docker version 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted image or build in a Dockerfile in an LZMA (.xz) archive.
- CVE-2014-6407High
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a symlink or hard link attack in an image archive during a pull or load operation.
- CVE-2014-3499High
Docker version 1.0.0 uses world-readable and world-writable permissions on the management socket, allowing local users to gain privileges via unspecified vectors.
- CVE-2026-66384MediumActively exploited
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.