How many Docker Docker Sandboxes CVEs are in CISA KEV?

None of Docker Docker Sandboxes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Docker Docker Sandboxes vulnerabilities?

Yes — 1 of Docker Docker Sandboxes's CVEs have a known public exploit.

Which versions of Docker Docker Sandboxes are affected?

7 distinct Docker Docker Sandboxes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Docker Docker Sandboxes CVEs?

Docker Docker Sandboxes's CVEs most often map to these CWE weakness types: CWE-923 (Improper Restriction of Communication Channel to Intended Endpoints), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-863 (Incorrect Authorization).

What is the average severity of Docker Docker Sandboxes CVEs?

The average CVSS base score across Docker Docker Sandboxes's scored CVEs is 5.9.

Docker Sandboxes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Docker Sandboxes vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Docker Sandboxes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Docker Sandboxes has 4 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Docker Sandboxes, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of Docker Sandboxes's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Docker Sandboxes's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Docker Sandboxes's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Docker Sandboxes version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.38.01 CVE
0.13.0 <= v < 0.33.01 CVE
0.14.0 <= v < 0.33.01 CVE
0.35.0 <= v <= 0.38.01 CVE

Fixed in

0.33.02 CVEs
> 0.38.01 CVE
0.38.01 CVE

Find a version

4 CVEs

Sort

Tar extraction in moby/go-archive can write outside the destination directory via link following
CVE-2026-17106
Public exploit
Patch
Workaround
CWE-59
High · CVSS 7.1
EPSS 0.3% (25th pct)2026-08-18
Docker Sandboxes read-only runtime mount writable through its shared-export alias
CVE-2026-18171
Patch
CWE-863
Medium · CVSS 5.7
EPSS 0.1% (1th pct)2026-08-12
Docker Sandboxes ICMP egress restriction bypass after daemon restart
CVE-2026-12539
Patch
CWE-923
Medium · CVSS 5.1
EPSS 0.1% (4th pct)2026-06-18
Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
CVE-2026-12039
Patch
CWE-923
Medium · CVSS 5.7
EPSS 0.1% (4th pct)2026-06-18

Common weakness types

The CWE weakness categories most often found in Docker Sandboxes CVEs. Follow any weakness for its full explanation.

Other Docker products

Browse vulnerabilities for other products by Docker.

docker54 CVEs Docker Desktop37 CVEs github.com/docker/docker33 CVEs desktop14 CVEs engine6 CVEs cli3 CVEs compose3 CVEs Docker Engine3 CVEs

All Docker vulnerabilities

Frequently asked questions

Common questions about Docker Sandboxes vulnerabilities.

How many CVEs does Docker Docker Sandboxes have?: Docker Docker Sandboxes has 4 published CVE records since 2026.
How many Docker Docker Sandboxes CVEs are in CISA KEV?: None of Docker Docker Sandboxes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Docker Docker Sandboxes vulnerabilities?: Yes — 1 of Docker Docker Sandboxes's CVEs have a known public exploit.
Which versions of Docker Docker Sandboxes are affected?: 7 distinct Docker Docker Sandboxes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Docker Docker Sandboxes CVEs?: Docker Docker Sandboxes's CVEs most often map to these CWE weakness types: CWE-923 (Improper Restriction of Communication Channel to Intended Endpoints), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-863 (Incorrect Authorization).
What is the average severity of Docker Docker Sandboxes CVEs?: The average CVSS base score across Docker Docker Sandboxes's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Docker Sandboxes vulnerabilities

Monitor new Docker Sandboxes vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing