Docker Desktop (Docker) - vulnerabilities (CVEs)

21 CVEs, 0 in the last 30 days, 147 known versions, newest CVE from 2026-06-02. Vendor: Docker.

CVEs of Docker Desktop

CVE-2026-8936 - CVSS 8.2 (high), 2026-06-02: Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder…
CVE-2026-5843 - CVSS 8.8 (high), 2026-05-22: The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from…
CVE-2026-5817 - CVSS 8.8 (high), 2026-05-22: The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without…
CVE-2026-6406 - CVSS 8.8 (high), 2026-05-22: The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts…
CVE-2026-2664 - CVSS 7.8 (high), 2026-02-24: An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0…
CVE-2025-13743 - CVSS 7.5 (high), 2025-12-09: Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking…
CVE-2025-9164 - CVSS 8.8 (high), 2025-10-27: Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads…
CVE-2025-10657 - CVSS 8.7 (high), 2025-09-26: In a hardened Docker environment, with Enhanced Container Isolation ( ECI…
CVE-2025-9074 - CVSS 9.3 (critical), 2025-08-20: A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet,…
CVE-2025-6587 - CVSS 5.2 (medium), 2025-07-03: System environment variables are recorded in Docker Desktop diagnostic logs, when using shell auto-completion. This leads to unintentional disclosure of…
CVE-2025-4095 - CVSS 4.3 (medium), 2025-04-29: Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a…
CVE-2025-3911 - CVSS 5.2 (medium), 2025-04-29: Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive…
CVE-2025-3224 - CVSS 7.8 (high), 2025-04-28: A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate…
CVE-2025-1696 - CVSS 5.2 (medium), 2025-03-06: A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application…
CVE-2024-9348 - CVSS 8.9 (high), 2024-10-16: Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.
CVE-2024-8696 - CVSS 9.8 (critical), 2024-09-12: A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop…
CVE-2024-8695 - CVSS 9.8 (critical), 2024-09-12: A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before…
CVE-2023-5166 - CVSS 8 (high), 2023-09-25: Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0.
CVE-2023-5165 - CVSS 8.8 (high), 2023-09-25: Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains…
CVE-2023-0625 - CVSS 9.8 (critical), 2023-09-25: Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0.
CVE-2023-0633 - CVSS 7.8 (high), 2023-09-25: In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker…
CVE-2023-0627 - CVSS 7.8 (high), 2023-09-25: Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue…
CVE-2023-0626 - CVSS 9.8 (critical), 2023-09-25: Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0.
CVE-2023-1802 - CVSS 7.5 (high), 2023-04-06: In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A…
CVE-2023-0629 - CVSS 7.1 (high), 2023-03-13: Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to…
CVE-2023-0628 - CVSS 7.8 (high), 2023-03-13: Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user…
CVE-2021-44719 - CVSS 8.4 (high), 2022-05-25: Docker Desktop 4.3.0 has Incorrect Access Control.
CVE-2022-26659 - CVSS 7.1 (high), 2022-03-25: Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place…
CVE-2022-23774 - CVSS 5.3 (medium), 2022-02-01: Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.
CVE-2021-45449 - CVSS 5.5 (medium), 2022-01-12: Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only…
CVE-2020-15360 - CVSS 7.8 (high), 2020-06-27: com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.
CVE-2020-11492 - CVSS 7.8 (high), 2020-06-05: An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same…