Docker Docker Desktop
21 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114409 | 4.39.0 – < 4.97.0 | Docker Desktop logs can expose stored third-party credentials | MEDIUM 5.7 | 0.1 % | ||
| CVE-2026-106581 | < 4.92.0 | Docker Desktop for Windows installer failed to verify external packages | HIGH 8.2 | 0.1 % | ||
| CVE-2026-17106 | < 4.86.0 | Tar extraction in moby/go-archive can write outside the destination directory via link following | HIGH 7.1 | 0.4 % | ||
| CVE-2026-8936 | 4.33.0 – < 4.76.0 | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | HIGH 8.2 | 0.1 % | ||
| CVE-2026-5843 | 4.56.0 – < 4.71.0 | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading | HIGH 8.8 | 0.2 % | ||
| CVE-2026-5817 | 4.62.0 – < 4.68.0 | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends | HIGH 8.8 | 0.2 % | ||
| CVE-2026-6406 | 4.41.0 – < 4.59.0 | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag | HIGH 8.8 | 0.2 % | ||
| CVE-2026-2664 | < 4.62.0 | Out of bounds read vulnerability in grpcfuse kernel module | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-13743 | 4.51.0 – < 4.54.0 | Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs | LOW 2.4 | 0.2 % | ||
| CVE-2025-9164 | ≤ 4.48.0 | Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows | HIGH 8.8 | 0.1 % | ||
| CVE-2025-10657 | 4.46.0 | Docker Desktop with ECI Fails to Enforce Socket Command Restrictions | HIGH 8.7 | 0.1 % | ||
| CVE-2025-9074 | 4.25 – < 4.44.3 | Docker Desktop allows unauthenticated access to Docker Engine API from containers | CRITICAL 9.3 | 1.9 % | ||
| CVE-2025-6587 | < 4.43.0 | Exposure of system environment variables in Docker Desktop diagnostic logs | MEDIUM 5.2 | 0.1 % | ||
| CVE-2025-3911 | < 4.41.0 | Exposure in Docker Desktop logs of environment variables configured for running containers | MEDIUM 5.2 | 0.2 % | ||
| CVE-2025-4095 | 4.36.0 – < 4.41.0 | Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-3224 | < 4.41.0 | Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion | HIGH 7.3 | 0.2 % | ||
| CVE-2025-1696 | < 4.39.0 | Exposure of Proxy Credentials in Docker Desktop Logs | MEDIUM 5.2 | 0.2 % | ||
| CVE-2024-9348 | < 4.34.3 | Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view | HIGH 8.9 | 0.5 % | ||
| CVE-2024-8696 | < 4.34.2 | A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension … | HIGH 8.9 | 1.2 % | ||
| CVE-2024-8695 | < 4.34.2 | A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docke… | CRITICAL 9.0 | 1.3 % | ||
| CVE-2023-1802 | 4.17.0 – < 4.18.0 | In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check… | HIGH 7.5 | 0.5 % |