Go github.com/docker/docker

Name: Go github.com/docker/docker
Brand: Go

productUS

pkg:golang/github.com/docker/docker

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical15high13medium1low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-14271US	critical9.8	18.8% (97th)	Exploit	19.03.1	2019-07-29	2 versions
CVE-2024-41110US	—OT elevated	16.5% (97th)	Exploit	26.1.5	2024-07-24	7 versions
CVE-2026-34040US	high7.8OT elevated	9.11% (95th)	Exploit	no fix	2026-03-31	—
CVE-2021-41091US	medium6.3	2.85% (87th)	Exploit	20.10.9	2021-10-04	2 versions
CVE-2026-41567US	—	0.15% (5th)	Exploit	no fix	2026-06-05	2 versions
CVE-2014-9357US	high10.0	6.20% (93rd)	—	1.3.3	2014-12-16	< 1.3.3
CVE-2014-9356US	high8.6	4.92% (92nd)	—	1.3.3	2019-12-02	< 1.3.3
CVE-2014-6407US	high7.5	4.91% (92nd)	—	1.3.2	2014-12-12	< 1.3.2
CVE-2019-13509US	high7.5	3.65% (90th)	—	18.09.8	2019-07-18	< 18.09.8
CVE-2014-6408US	medium5.0	3.14% (88th)	—	1.3.2	2014-12-12	1.3.0 → 1.3.2
CVE-2023-28840US	high8.7	2.56% (85th)	—	23.0.3	2023-04-04	4 versions
CVE-2014-9358US	medium6.4	2.53% (85th)	—	1.3.2	2014-12-16	< 1.3.2
CVE-2014-5277US	medium5.0	1.87% (79th)	—	1.3.1	2014-11-17	< 1.3.1
CVE-2020-27534US	medium5.3	1.77% (78th)	—	19.03.9	2020-12-30	< 19.03.9
CVE-2023-28842US	medium6.8	1.44% (73rd)	—	20.10.24+incompatible	2023-04-04	4 versions
CVE-2022-36109US	medium6.3OT elevated	1.04% (64th)	—	20.10.18	2022-09-09	2 versions
CVE-2018-12608US	high7.5OT elevated	0.92% (60th)	—	17.06.0-ce	2018-09-10	< 17.06.0-ce
CVE-2024-29018US	high7.5	0.74% (55th)	—	26.0.0-rc3+incompatible	2024-03-20	5 versions
CVE-2023-28841US	medium6.8OT elevated	0.69% (53rd)	—	20.10.24+incompatible	2023-04-04	4 versions
CVE-2015-3627US	high7.2	0.61% (49th)	—	1.6.1	2015-05-18	< 1.6.1
CVE-2015-3629US	high7.8	0.60% (49th)	—	1.6.1	2015-05-18	1.6.0 → 1.6.1
CVE-2015-3631US	low3.6	0.57% (47th)	—	1.6.1	2015-05-18	< 1.6.1
CVE-2015-3630US	high7.2	0.55% (46th)	—	1.6.1	2015-05-18	1.6.0 → 1.6.1
CVE-2022-24769US	medium5.9	0.49% (42nd)	—	20.10.14	2022-03-24	2 versions
CVE-2014-3499US	high7.2OT elevated	0.39% (33rd)	—	1.0.1	2014-07-11	< 1.0.1
CVE-2026-33997US	high8.1	0.39% (33rd)	—	no fix	2026-03-31	—
CVE-2024-32473US	medium6.5	0.35% (28th)	—	26.0.2	2024-04-18	2 versions
CVE-2021-41089US	medium6.3	0.29% (21st)	—	20.10.9	2021-10-04	2 versions
CVE-2024-24557US	high7.8OT elevated	0.26% (18th)	—	25.0.2	2024-02-01	4 versions
CVE-2025-54388US	medium4.6	0.25% (16th)	—	28.3.3	2025-07-30	2 versions
CVE-2025-54410US	medium5.2	0.17% (6th)	—	25.0.13	2025-07-30	3 versions
CVE-2026-41568US	—	0.11% (1st)	—	no fix	2026-06-12	2 versions
CVE-2026-42306US	high7.2	0.10% (1st)	—	no fix	2026-06-12	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2645 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-285Improper Authorization4 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')4 CVEs
CWE-636Not Failing Securely ('Failing Open')3 CVEs
CWE-755Improper Handling of Exceptional Conditions3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-281Improper Preservation of Permissions2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan