Docker security advisories, June 2026

Every Docker security advisory published in June 2026, from Docker Security ([email protected] CNA) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 6
Critical: 0
High: 3
In CISA KEV: 0
CVEs: 6

Docker advisories published in June 2026

Jun 18, 2026
Medium [CVE-2026-12539] Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox forwards ICMP to arbitrary hosts
Medium5.7
Jun 18, 2026
Medium [CVE-2026-12039] Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without consulting the policy
Medium5.7
Jun 12, 2026
High [CVE-2026-42306] Docker Engine: Moby is an open source container framework
High7.2
Jun 12, 2026
Medium [CVE-2026-41568] Docker Engine: Moby is an open source container framework
Medium6.1
Jun 5, 2026
High [CVE-2026-41567] Docker Engine: Moby is an open source container framework
High7.2
Jun 2, 2026
High [CVE-2026-8936] Docker Desktop: Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event
High8.2

Get an email when Docker publishes the next one.

See Docker's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Docker

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.