{"id":"CVE-2016-8867","details":"Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.","modified":"2026-08-27T08:18:25.662531Z","published":"2016-10-28T15:59:14.047Z","related":["SUSE-SU-2016:3084-1","SUSE-SU-2025:03540-1","SUSE-SU-2025:03545-1","openSUSE-SU-2024:10532-1","openSUSE-SU-2025:15589-1"],"references":[{"type":"WEB","url":"http://www.securitytracker.com/id/1037203"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/94228"},{"type":"ADVISORY","url":"https://www.docker.com/docker-cve-database"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/docker-archive/engine","events":[{"introduced":"bb80604a0b200140a440675348c848a137a1b2e2"},{"last_affected":"bb80604a0b200140a440675348c848a137a1b2e2"}],"database_specific":{"cpe":"cpe:2.3:a:docker:docker:1.12.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.12.2"},{"last_affected":"1.12.2"}],"source":"CPE_STRING"}}],"versions":["1.12.2","v1.12.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8867.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/moby/moby","events":[{"introduced":"bb80604a0b200140a440675348c848a137a1b2e2"},{"last_affected":"bb80604a0b200140a440675348c848a137a1b2e2"}],"database_specific":{"cpe":"cpe:2.3:a:docker:docker:1.12.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.12.2"},{"last_affected":"1.12.2"}],"source":"CPE_STRING"}}],"versions":["1.12.2","v1.12.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8867.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}