CyberSIXT Search
Vendor

Docker

No CISA KEV deadline is open. CISA last added a Docker CVE on 3 Nov 2021.

Tracked since 17 Aug · latest article Tue 13 Oct · RSS

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2019-15752not in CyberSIXT coverageDesktop Community Edition3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles

Products

3 products · 3 CVEs in coverage
Desktop Community Edition0 CVEs · 1 in KEVSandboxes2 CVEs · 0 in KEVlatest 17 SepHub1 CVEs · 0 in KEVlatest 13 Oct

Coverage

4 articles · all timeFull timeline →

4 articles from 2 outlets since 17 Aug; the latest 12 days ago.

Docker: coverage over time4 articles from 2 outlets. First report 17 Aug by SecurityOnline. Busiest week: 2 articles, week of 12 Oct. 0 in the last 7 days. Docker: coverage over time4 articles from 2 outlets. First report 17 Aug by SecurityOnline. Busiest week: 2 articles, week of 12 Oct. 0 in the last 7 days.
  • Article
  • First report
Show as table
Docker: articles
Published (UTC)OutletHeadline
Tue 13 Oct · 19:25 UTCThe Hacker NewsDocker Hub patched critical GhostPat flaw that let attackers hijack image access
Tue 13 Oct · 19:24 UTCSecurityOnlineDocker fixes critical flaw that could hijack developers’ access tokens
Thu 17 Sep · 11:55 UTCSecurityOnlineDocker Fixes Critical Sandbox Flaws Allowing Host File Writes and Socket Access
Mon 17 Aug · 16:01 UTCSecurityOnlineDocker CopyEscape bug lets attackers write files via docker cp

Who reported 2 outlets, last 12 months

  • SecurityOnline3
  • The Hacker News1
See the full timeline
  1. Docker Hub patched critical GhostPat flaw that let attackers hijack image accessThe Hacker News
  2. Docker fixes critical flaw that could hijack developers’ access tokensSecurityOnline
  3. Docker Fixes Critical Sandbox Flaws Allowing Host File Writes and Socket AccessSecurityOnline
  4. Docker CopyEscape bug lets attackers write files via docker cpSecurityOnline

All CVEs in coverage

3
CVE-2026-105445Docker Hub account conversion could reassign an active personal access token to another userCVSS9.4Critical–Not in KEV0.4%EPSS2articles
CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackCVSS9.4Critical–Not in KEV0.2%EPSS1article
CVE-2026-79994Docker Sandboxes vulnerabilityCVSS8.7High–Not in KEV0.1%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device