Docker Docker Desktop

• CVE-2026-112917 Critical 9.2 Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall 0.2%
• CVE-2026-114409 Medium 5.7 Docker Desktop logs can expose stored third-party credentials 0.1%
• CVE-2026-106581 High 8.2 Docker Desktop for Windows installer failed to verify external packages <0.1%
• CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
• CVE-2026-8936 High 8.2 Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM 0.1%
• CVE-2026-5843 High 8.2 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading 0.2%
• CVE-2026-5817 High 8.2 Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends 0.2%
• CVE-2026-6406 High 8.8 Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag 0.2%
• CVE-2026-2664 Medium 6.8 Out of bounds read vulnerability in grpcfuse kernel module 0.2%
• CVE-2025-13743 Low 2.4 Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs 0.2%
• CVE-2025-9164 High 8.8 Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows 0.1%
• CVE-2025-10657 High 8.7 Docker Desktop with ECI Fails to Enforce Socket Command Restrictions 0.1%
• CVE-2025-9074 Critical 9.3 Docker Desktop allows unauthenticated access to Docker Engine API from containers 1.9%
• CVE-2025-6587 Medium 5.2 Exposure of system environment variables in Docker Desktop diagnostic logs 0.1%
• CVE-2025-3911 Medium 5.2 Exposure in Docker Desktop logs of environment variables configured for running containers 0.2%
• CVE-2025-4095 Medium 4.3 Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile 0.2%
• CVE-2025-3224 High 7.3 Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion 0.2%
• CVE-2025-1696 Medium 5.2 Exposure of Proxy Credentials in Docker Desktop Logs 0.2%
• CVE-2024-9348 High 8.9 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view 0.5%
• CVE-2024-8696 High 8.9 A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. 1.2%
• CVE-2024-8695 Critical 9.0 A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. 1.3%
• CVE-2023-1802 Medium 5.9 In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed 0.5%