File and Path Handling

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer AnnotationsCVE-2025-62725docker · CVSS 8.9 · 16% likely

   CWE-22

2. util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first arg…CVE-2020-27534Docker · 1.8% likely

   CWE-22

3. Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DAC…CVE-2020-10665Docker · 1.4% likely

   CWE-59

4. In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user crea…CVE-2015-9259Docker · 1.3% likely

   CWE-434

5. Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a s…CVE-2015-3627Docker · 0.6% likely

   CWE-59

6. Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symli…CVE-2015-3629Docker · 0.6% likely

   CWE-59

7. Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2025-15558Docker · CVSS 7.3 · 0.5% likely

   CWE-427

8. Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer…CVE-2022-26659Docker · 0.4% likely

   CWE-59

9. Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder para…CVE-2022-34292Docker · CVSS 7.1 · 0.3% likely

   CWE-59

10. Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vu…CVE-2022-31647Docker · CVSS 7.1 · 0.3% likely

    CWE-59

11. Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the…CVE-2022-38730Docker · CVSS 6.3 · 0.3% likely

    CWE-59

12. Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryCVE-2026-103916Docker · CVSS 8.4 · 0.2% likely

    CWE-59

13. Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackCVE-2026-77179Docker · CVSS 9.4 · 0.2% likelycovered by CyberSIXT

    CWE-591 article

14. Bake filesystem path entitlements approval can be skipped for path using basename prefixCVE-2026-121542Docker · CVSS 1.8 · 0.1% likely

    CWE-22

15. Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsCVE-2025-9164Docker · CVSS 8.8 · 0.1% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.