DD
Product
Docker Desktop
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 11Medium 4Low 0
Watch
Add Docker Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10665 | 6.7 | Mar 18 | Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary… Affected: before 2.1.0.9; before 2.2.0.4; before 2.2.2.0 |
| CVE-2022-38730 | 6.3 | Apr 27 | Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the… Affected: before 4.6.0 |
| CVE-2026-114409 New | 5.7 | Oct 27 | Docker Desktop logs can expose stored third-party credentials Affected: 4.39.0 before 4.97.0 |
| CVE-2024-5652 | 5.5 | Jul 9 | In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode Affected: before 4.31.0 |
Showing 4