Log in Start free

Docker

Products

ProductCVEsExploitedLatest
Docker Desktop22–Nov 3, 2026
Docker Sandboxes11–Nov 3, 2026
Docker Buildx4–Nov 3, 2026
Docker Engine3–Oct 7, 2026
model-runner2–Apr 1, 2026
Compose2–Mar 4, 2026
Docker CLI2–Aug 18, 2026
mcp-gateway2–Sep 15, 2026
Docker Engine overlay network driver1–Oct 7, 2026
Docker Hub1–Oct 13, 2026
cli1–Oct 4, 2021
docker/daemon1–Jun 5, 2026
buildx1–Mar 17, 2025
Docker Compose1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-121541 Medium 5.6 Bake filesystem path entitlements approval can be skipped in some multi-target builds 0.1%
  • CVE-2026-121542 Low 1.8 Bake filesystem path entitlements approval can be skipped for path using basename prefix 0.1%
  • CVE-2026-121614 High 7.1 Docker Sandboxes host Git executes repository-controlled programs 0.1%
  • CVE-2026-93325 High 7.3 Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx 0.1%
  • CVE-2026-112917 Critical 9.2 Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall 0.2%
  • CVE-2026-103916 High 8.4 Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory 0.2%
  • CVE-2026-114409 Medium 5.7 Docker Desktop logs can expose stored third-party credentials 0.1%
  • CVE-2026-105445 Critical 9.4 Docker Hub account conversion could reassign an active personal access token to another user 0.4%
  • CVE-2026-106581 High 8.2 Docker Desktop for Windows installer failed to verify external packages <0.1%
  • CVE-2026-105452 Medium 5.9 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts 0.1%
  • CVE-2026-101998 Medium 5.9 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials 0.2%
  • CVE-2026-105570 Medium 6.7 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host 0.1%
  • CVE-2026-92543 High 7.6 Docker Engine insecure-registry fallback via malicious DNS responses <0.1%
  • CVE-2026-92542 Medium 6.9 Blind VXLAN injection into encrypted overlay networks from cluster peer <0.1%
  • CVE-2026-92542 Medium 6.9 Blind VXLAN injection into encrypted overlay networks from cluster peer <0.1%
  • CVE-2026-103433 Medium 6.9 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions 0.3%
  • CVE-2026-79994 High 8.7 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race 0.1%
  • CVE-2026-55887 High 8.7 MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway 0.2%
  • CVE-2026-77179 Critical 9.4 Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback 0.2%
  • CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
  • CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
  • CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
  • CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
  • CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
  • CVE-2026-18171 Medium 5.7 Docker Sandboxes read-only runtime mount writable through its shared-export alias 0.1%
  • CVE-2026-12539 Medium 5.1 Docker Sandboxes ICMP egress restriction bypass after daemon restart 0.1%
  • CVE-2026-12039 Medium 5.7 Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution 0.1%
  • CVE-2026-41567 High 7.2 Docker: `PUT /containers/{id}/archive` executes container binary on the host 0.2%
  • CVE-2026-8936 High 8.2 Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM 0.1%
  • CVE-2026-5843 High 8.2 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading 0.2%