TLDR InfoSec · ATTACKS & VULNERABILITIES

DOCKER FIXES CVE-2025-9074, CRITICAL CONTAINER ESCAPE VULNERABILITY WITH CVSS SCORE 9.3

links.tldrnewsletter.com3 min read

Summary from the TLDR InfoSec newsletter

Docker patched a critical container escape flaw (CVSS 9.3) affecting Windows and macOS. The vulnerability (CVE-2025-9074) allowed attackers to access host files from within containers, posing major risks to containerized environments.