Summary
generated automatically from NVD dataDocker Engine 1.12.2 turned on ambient capabilities while its capability policies were misconfigured. As a result, a malicious image could get around user permission checks and reach files in the container filesystem or in mounted volumes, which mainly threatens confidentiality. The flaw is classified under CWE-264 and has a CVSS v3.0 score of 7.5 (HIGH).
NVD description
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
EPSS · FIRST.org
2.8%probability of exploitation in the next 30 days
Higher than 86% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v3.0 Score
Information
- Published
- 28 oct. 2016
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (6)
- http://www.securityfocus.com/bid/94228Third Party AdvisoryVDB Entry
- https://www.docker.com/docker-cve-databaseVendor Advisory
- http://www.securityfocus.com/bid/94228Third Party AdvisoryVDB Entry
- https://www.docker.com/docker-cve-databaseVendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-264
Running Docker? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.