ZDI-CAN-27229 HIGH 8.2 Overdue May 28, 2025

Docker

Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 8.2) that requires local access and elevated privileges to exploit but can compromise confidentiality, integrity, and availability across multiple systems. The attack is straightforward to execute with no user interaction needed once an attacker has high-level access on the host machine. Security teams should monitor for suspicious activities from privileged users and patch Docker installations by the September 25, 2025 deadline to prevent potential container escape or lateral movement attacks.

Advisory Details
Researcher Discovered by: Nitesh Surana (niteshsurana.com) of Trend Research
Reported May 28, 2025
Deadline September 25, 2025 203d overdue
CVSS Vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy