Yes, images marked as such are considered to have vulnerabilities. These vulnerabilities usually come from the software and dependent libraries included in the system or upper-layer image on which they are based. Of course, it may also be a problem with the software itself.
This tip only means that the environment in which the image is based is vulnerable, but it does not mean that the vulnerability will definitely be attacked.
You can choose to use its Dockerflie to rebuild the image, update the vulnerable software, or protect the vulnerability at the firewall level.