docker docker

Name: docker docker
Brand: docker

productUS

cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical22high12medium1low

updated 2026-10-26

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-15752US	high7.8OT critical	48.6% (99th)	KEV	2.1.0.1	2019-08-28	< 2.1.0.1
CVE-2019-5736US	high8.6	98.5% (100th)	Exploit	18.09.2	2019-02-11	< 18.09.2
CVE-2019-14271US	critical9.8	18.8% (97th)	Exploit	19.03.1	2019-07-29	19.03 → 19.03.1
CVE-2022-25365US	high7.8	0.84% (57th)	Exploit	4.5.1	2022-02-19	< 4.5.1
CVE-2014-0048US	critical9.8	7.28% (94th)	—	1.5.0	2020-01-02	< 1.5.0
CVE-2014-9357US	high10.0	6.20% (94th)	—	no fix	2014-12-16	= 1.3.2
CVE-2014-9356US	high8.6	4.92% (92nd)	—	1.3.3	2019-12-02	< 1.3.3
CVE-2014-6407US	high7.5	4.91% (92nd)	—	no fix	2014-12-12	3 versions
CVE-2019-16884US	high7.5OT elevated	4.41% (91st)	—	no fix	2019-09-25	≤ 19.03.2
CVE-2019-13509US	high7.5	3.65% (90th)	—	18.09.8	2019-07-18	5 versions
CVE-2018-15664US	high7.5	3.43% (89th)	—	no fix	2019-05-23	19 versions
CVE-2021-21285US	medium6.5	3.29% (88th)	—	19.03.15	2021-02-02	2 versions
CVE-2014-6408US	medium5.0	3.14% (88th)	—	no fix	2014-12-12	2 versions
CVE-2016-6595US	medium6.5	2.82% (86th)	—	no fix	2017-01-04	= 1.12.0
CVE-2016-8867US	high7.5	2.75% (86th)	—	no fix	2016-10-28	= 1.12.2
CVE-2014-8179US	high7.5	2.73% (86th)	—	1.8.3	2019-12-17	< 1.8.3
CVE-2014-9358US	medium6.4	2.53% (85th)	—	no fix	2014-12-16	≤ 1.3.2
CVE-2018-15514US	high8.8	2.47% (84th)	—	no fix	2018-09-01	36 versions
CVE-2017-14992US	medium6.5	2.45% (84th)	—	no fix	2017-11-01	9 versions
CVE-2019-13139US	high8.4	2.04% (81st)	—	18.09.4	2019-08-22	< 18.09.4
CVE-2014-5277US	medium5.0	1.87% (79th)	—	no fix	2014-11-17	≤ 1.3.0
CVE-2020-27534US	medium5.3	1.77% (78th)	—	19.03.9	2020-12-30	< 19.03.9
CVE-2014-5278US	medium5.3	1.50% (74th)	—	1.2.0	2020-02-07	< 1.2.0
CVE-2014-5282US	high8.1	1.32% (71st)	—	1.3	2018-02-06	< 1.3
CVE-2018-10892US	medium5.3	1.13% (66th)	—	no fix	2018-07-06	1.11 → 18.03.1
CVE-2021-21284US	medium6.8	1.06% (64th)	—	20.10.3	2021-02-02	2 versions
CVE-2015-3627US	high7.2	0.61% (49th)	—	no fix	2015-05-18	≤ 1.6
CVE-2015-3631US	low3.6	0.57% (46th)	—	no fix	2015-05-18	≤ 1.6
CVE-2015-3630US	high7.2	0.55% (45th)	—	no fix	2015-05-18	≤ 1.6
CVE-2014-8178US	medium5.5	0.49% (41st)	—	1.8.3	2019-12-17	< 1.8.3
CVE-2016-9962US	medium6.4	0.41% (34th)	—	1.12.6	2017-01-31	1.11.0 → 1.12.6
CVE-2014-3499US	high7.2OT elevated	0.39% (32nd)	—	no fix	2014-07-11	= 1.0.0
CVE-2014-0047US	high7.8	0.39% (32nd)	—	no fix	2017-10-06	≤ 1.4.1
CVE-2016-3697US	high7.8	0.39% (32nd)	—	no fix	2016-06-01	≤ 1.11.1
CVE-2020-14300US	high8.8	0.38% (31st)	—	no fix	2020-07-13	= 1.13.1
CVE-2020-14298US	high8.8	0.32% (24th)	—	no fix	2020-07-13	= 1.13.1
CVE-2021-3162US	high7.8	0.18% (7th)	—	2.5.0.0	2021-01-15	< 2.5.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2647 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-285Improper Authorization4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-271Privilege Dropping / Lowering Errors2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan