Skip to content
Docker vulnerabilities
Newest
-
docker desktop
Docker Desktop logs can expose stored third-party credentials
CVE-2026-114409
5.7 Medium
-
docker hub
Docker Hub account conversion could reassign an active personal access token to another user
CVE-2026-105445
Public exploit
9.4 Critical
-
docker desktop
Docker Desktop for Windows installer failed to verify external packages
CVE-2026-106581
8.2 High
-
docker sandboxes
Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
CVE-2026-105452
5.9 Medium
-
docker sandboxes
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
CVE-2026-101998
5.9 Medium
-
docker sandboxes
Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
CVE-2026-105570
6.7 Medium
-
docker buildx
Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
CVE-2026-103433
Fix available
6.9 Medium
-
docker engine, engine overlay network driver, moby overlay network driver +2 more
Blind VXLAN injection into encrypted overlay networks from cluster peer
CVE-2026-92542
Fix available
6.9 Medium
-
docker engine, moby +1 more
Docker Engine insecure-registry fallback via malicious DNS responses
CVE-2026-92543
Fix available
7.6 High
-
docker sandboxes
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
CVE-2026-79994
8.7 High
-
docker sandboxes
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
CVE-2026-77179
Public exploit
9.4 Critical
-
moby go-archive, docker cli, compose +3 more +5 more
Tar extraction in moby/go-archive can write outside the destination directory via link following
CVE-2026-17106
Public exploitFix available
7.1 High
-
docker sandboxes
Docker Sandboxes read-only runtime mount writable through its shared-export alias
CVE-2026-18171
5.7 Medium
-
docker sandboxes
Docker Sandboxes ICMP egress restriction bypass after daemon restart
CVE-2026-12539
5.1 Medium
-
docker sandboxes
Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
CVE-2026-12039
5.7 Medium
-
docker mcp-gateway
MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway
CVE-2026-55887
Fix available
8.7 High
-
docker desktop
Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
CVE-2026-8936
8.2 High
-
docker desktop
Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading
CVE-2026-5843
Public exploit
8.8 High
-
docker desktop
Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends
CVE-2026-5817
Public exploit
8.8 High
-
docker desktop
Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
CVE-2026-6406
8.8 High
-
docker engine, moby, mobyproject moby\/v2 +2 more
Moby: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-42306
Fix available
7.2 High
-
docker engine, moby, mobyproject moby\/v2 +2 more
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568
Fix available
6.1 Medium
-
docker engine, moby docker engine, docker docker/daemon +20 more +22 more
Docker: `PUT /containers/{id}/archive` executes container binary on the host
CVE-2026-41567
Public exploitFix available
7.2 High
-
docker model runner, model-runner +1 more
Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
CVE-2026-33990
Fix available
6.8 Medium
-
moby, docker engine +1 more
Moby: AuthZ plugin bypass with oversized request body
CVE-2026-34040
Public exploitFix available
8.8 High
-
moby, docker engine, red hat multicluster engine for kubernetes +7 more +9 more
Moby: Off-by-one error in plugin privilege validation
CVE-2026-33997
Fix available
6.8 Medium
-
docker compose, cli, command line interface +27 more +29 more
Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2025-15558
Fix available
7.0 High
-
docker model-runner
Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint
CVE-2026-28400
7.6 High
-
docker desktop
Out of bounds read vulnerability in grpcfuse kernel module
CVE-2026-2664
6.8 Medium
-
docker desktop
Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities
CVE-2025-14740
6.7 Medium
-
docker desktop
Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
CVE-2025-13743
2.4 Low
-
docker mcp gateway, mcp-gateway +1 more
DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
CVE-2025-64443
Fix available
7.3 High
-
docker compose
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
CVE-2025-62725
Fix available
EPSS 13.7%
8.9 High
-
docker desktop
Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
CVE-2025-9164
8.8 High
-
docker desktop
Docker Desktop with ECI Fails to Enforce Socket Command Restrictions
CVE-2025-10657
8.7 High
-
docker desktop
Docker Desktop allows unauthenticated access to Docker Engine API from containers
CVE-2025-9074
Public exploit
9.3 Critical
-
docker desktop
Exposure of system environment variables in Docker Desktop diagnostic logs
CVE-2025-6587
5.2 Medium
-
docker desktop
Exposure in Docker Desktop logs of environment variables configured for running containers
CVE-2025-3911
5.2 Medium
-
docker desktop
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
CVE-2025-4095
4.3 Medium
-
docker desktop
Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion
CVE-2025-3224
7.3 High
-
docker buildx
Secrets leakage to telemetry endpoint via cache backend configuration via buildx
CVE-2025-0495
Fix available
4.1 Medium
-
docker desktop
Exposure of Proxy Credentials in Docker Desktop Logs
CVE-2025-1696
5.2 Medium
-
docker desktop
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
CVE-2024-9348
8.9 High
-
docker desktop
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
CVE-2024-8696
8.9 High
-
docker desktop
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
CVE-2024-8695
9.0 Critical
-
docker moby
Moby authz zero length regression
CVE-2024-41110
Public exploitFix available
EPSS 16.5%
10.0 Critical
-
docker desktop
In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC…
CVE-2024-6222
7.3 High
-
docker desktop
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode
CVE-2024-5652
6.1 Medium
-
composer, debian linux, fedoraproject fedora +2 more
Remote Code Execution via web-accessible composer.phar
CVE-2023-43655
Fix available
6.4 Medium
-
docker desktop
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE
CVE-2023-0633
7.2 High
- Show olderLoading…