Vulnerability Reportdockurr/windows:latest

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who reaches the packaged libraries could execute arbitrary code inside the container or cause denial of service, with CVE-2019-16227 (liblmdb0, severity 9.8) and the glibc issue CVE-2019-1010023 (severity 8.8) being the most impactful findings. Several of the severe items have narrow preconditions: CVE-2019-16227 requires accessing a data.mdb file supplied by the attacker, CVE-2019-1010023 requires running ldd against a malicious ELF, and the libperl regex overflow only applies to 32-bit perl builds. The 334 post-exploit-only findings are all below severity 6.0 (max 4.64), so they are secondary to the exposed surface. Restricting inbound network access to the container and avoiding untrusted file or XML input would remove the practical paths to the highest-severity exposed findings.