Is Docker Engine 25.0.12 affected?

CVSS 9.9

9 known vulnerabilities affect 25.0.12 (highest CVSS 9.9).

82 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 25.0.12

9.9
CVE-2024-41110 Authz zero length regression
8.8
CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
7.6
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
7.2
CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
7.2
CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
6.9
CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer fixed in 25.0.19
6.8
CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
6.1
CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
3.3
CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0