All 5 CVE vulnerabilities found in Docker Sandboxes, with AI-generated Chinese analysis, references, and POCs.
Vendor: Docker
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race CWE-367 | 8.7 | High | 2026-09-15 |
| CVE-2026-77179 | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback CWE-59 | 9.4 | Critical | 2026-09-15 |
| CVE-2026-18171 | Docker Sandboxes read-only runtime mount writable through its shared-export alias CWE-863 | 5.7 | Medium | 2026-08-12 |
| CVE-2026-12539 | Docker Sandboxes ICMP egress restriction bypass after daemon restart CWE-923 | 5.1 | Medium | 2026-06-18 |
| CVE-2026-12039 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution CWE-923 | 5.7 | Medium | 2026-06-18 |
All 5 known CVE vulnerabilities affecting Docker Sandboxes with full Chinese analysis, references, and POCs where available.