Login Request a demo
DO
Vendor
Docker
36 products with CVEs on record
127
CVEs
2
On KEV
10
New 30D
Products
DS
Docker Sandboxes
Docker
9.4
9 CVEs0 on KEV3 new
DD
Docker Desktop
Docker
9.8
16 CVEs0 on KEV2 new
DH
Docker Hub
Docker
9.4
1 CVEs0 on KEV1 new
DE
Docker Engine
Docker
7.6
3 CVEs0 on KEV2 new
DB
Docker Buildx
Docker
6.9
1 CVEs0 on KEV1 new
DE
Docker Engine overlay network driver
Docker
6.9
1 CVEs0 on KEV1 new
DO
Docker
Docker
9.8
37 CVEs1 on KEV0 new
DC
Desktop Community Edition
Docker
7.8
1 CVEs1 on KEV0 new
DD
Docker Desktop
Docker
9.8
19 CVEs0 on KEV0 new
EN
Engine
Docker
8.1
6 CVEs0 on KEV0 new
CL
Command Line Interface
Docker
8.0
2 CVEs0 on KEV0 new
CE
CS Engine
Docker
7.5
2 CVEs0 on KEV0 new
DC
Docker CLI
Docker
8.0
2 CVEs0 on KEV0 new
LI
Libcontainer
Docker
7.8
2 CVEs0 on KEV0 new
MC
mcp-gateway
docker
9.6
2 CVEs0 on KEV0 new
MO
model-runner
docker
9.1
2 CVEs0 on KEV0 new
NO
Notary
Docker
9.8
2 CVEs0 on KEV0 new
AD
Adminer
Docker
9.8
1 CVEs0 on KEV0 new
CD
Composer Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
CH
Credential Helpers
Docker
5.5
1 CVEs0 on KEV0 new
CL
Crux Linux Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
DC
Docker Compose
Docker
7.1
1 CVEs0 on KEV0 new
DO
docker/daemon
docker
7.2
1 CVEs0 on KEV0 new
DO
Docker-py
Docker
–
1 CVEs0 on KEV0 new
DR
Docker Registry
Docker
7.5
1 CVEs0 on KEV0 new
DO
Docs
Docker
9.8
1 CVEs0 on KEV0 new
EA
Elixir Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
GA
Ghost Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
HD
Haproxy Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
MA
Machine
Docker
6.5
1 CVEs0 on KEV0 new
MD
Memcached Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
ND
Notary Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
RD
Rabbitmq Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
RE
Registry
Docker
9.8
1 CVEs0 on KEV0 new
SA
Spiped Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
SD
Storm Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114409
New
DD
Docker Desktop
Docker
5.7–Oct 27Docker Desktop logs can expose stored third-party credentials
CVE-2026-105445
DH
Docker Hub
Docker
9.4
0%
Oct 13Docker Hub account conversion could reassign an active personal access token to another user
CVE-2026-106581
DD
Docker Desktop
Docker
7.3
0%
Oct 9Docker Desktop for Windows installer failed to verify external packages
CVE-2026-105452
DS
Docker Sandboxes
Docker
5.9
0%
Oct 8Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
CVE-2026-101998
DS
Docker Sandboxes
Docker
5.9
0%
Oct 8Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
CVE-2026-105570
DS
Docker Sandboxes
Docker
6.7
0%
Oct 8Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
CVE-2026-92543
DE
Docker Engine
Docker
7.6
0%
Oct 7Docker Engine insecure-registry fallback via malicious DNS responses
CVE-2026-92542
DE
Docker Engine overlay network driver
Docker
6.9
0%
Oct 7Blind VXLAN injection into encrypted overlay networks from cluster peer
CVE-2026-103433
DB
Docker Buildx
Docker
6.9
0%
Oct 5Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
CVE-2026-79994
DS
Docker Sandboxes
Docker
8.7
0%
Sep 15Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
CVE-2026-55887
MC
mcp-gateway
docker
8.7
0%
Sep 15MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway
CVE-2026-77179
DS
Docker Sandboxes
Docker
9.4
0%
Sep 15Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
CVE-2026-17106
DD
Docker Desktop
Docker
7.1
0%
Aug 18Tar extraction in moby/go-archive can write outside the destination directory via link following
CVE-2026-18171
DS
Docker Sandboxes
Docker
5.7
0%
Aug 12Docker Sandboxes read-only runtime mount writable through its shared-export alias
CVE-2026-12539
DS
Docker Sandboxes
Docker
5.7
0%
Jun 18Docker Sandboxes ICMP egress restriction bypass after daemon restart
CVE-2026-12039
DS
Docker Sandboxes
Docker
5.7
0%
Jun 18Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
CVE-2026-42306
EN
Engine
Docker
7.2
0%
Jun 12Moby: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-41568
EN
Engine
Docker
6.1
0%
Jun 12Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41567
DO
docker/daemon
docker
7.2
0%
Jun 5Docker: `PUT /containers/{id}/archive` executes container binary on the host
CVE-2026-8936
DD
Docker Desktop
Docker
8.2
0%
Jun 2Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
CVE-2026-5843
DD
Docker Desktop
Docker
8.6
0%
May 22Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading
CVE-2026-5817
DD
Docker Desktop
Docker
8.6
0%
May 22Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends
CVE-2026-6406
DD
Docker Desktop
Docker
8.8
0%
May 22Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
CVE-2026-33990
MO
model-runner
docker
9.1
0%
Apr 1Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
CVE-2026-33997
EN
Engine
Docker
8.1
0%
Mar 31Moby: Off-by-one error in plugin privilege validation
CVE-2026-34040
EN
Engine
Docker
7.8
9%
Mar 31Moby: AuthZ plugin bypass with oversized request body
CVE-2025-15558
DC
Docker CLI
Docker
8.0
1%
Mar 4Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2026-28400
MO
model-runner
docker
7.5
0%
Feb 27Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint
CVE-2026-2664
DE
Desktop
Docker
7.8
0%
Feb 24An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local…
CVE-2025-13743
DD
Docker Desktop
Docker
7.5
0%
Dec 9Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization
CVE-2025-64443
MG
Mcp Gateway
Docker
9.6
0%
Dec 3MCP Gateway allows easy and secure running and deployment of MCP servers
CVE-2025-3224
DE
Desktop
Docker
7.8
0%
Apr 28A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM
CVE-2024-8696
DE
Desktop
Docker
9.8
1%
Sep 12A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2
CVE-2024-8695
DE
Desktop
Docker
9.8
1%
Sep 12A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2
CVE-2024-6222
DE
Desktop
Docker
7.0
1%
Jul 9In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and…
CVE-2024-5652
DE
Desktop
Docker
5.5
0%
Jul 9In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in…
CVE-2023-40453
MA
Machine
Docker
6.5
1%
Nov 7Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing…
CVE-2023-5166
DD
Docker Desktop
Docker
6.5
1%
Sep 25Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
CVE-2023-5165
DD
Docker Desktop
Docker
8.8
0%
Sep 25Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time…
CVE-2023-0633
DD
Docker Desktop
Docker
7.8
0%
Sep 25In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0
CVE-2023-0627
DD
Docker Desktop
Docker
7.8
0%
Sep 25Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop:…
CVE-2023-0626
DD
Docker Desktop
Docker
9.8
1%
Sep 25Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
CVE-2023-0625
DD
Docker Desktop
Docker
9.8
1%
Sep 25Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
CVE-2022-38730
DE
Desktop
Docker
6.3
0%
Apr 27Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the…
CVE-2022-37326
DE
Desktop
Docker
7.8
0%
Apr 27Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field…
CVE-2022-34292
DE
Desktop
Docker
7.1
0%
Apr 27Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder…
CVE-2022-31647
DE
Desktop
Docker
7.1
0%
Apr 27Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different…
CVE-2023-1802
DE
Desktop
Docker
7.5
1%
Apr 6In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targeted network sniffing…
CVE-2023-0629
DD
Docker Desktop
Docker
7.1
0%
Mar 13Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or…
CVE-2023-0628
DD
Docker Desktop
Docker
7.8
0%
Mar 13Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted…
CVE-2021-44719
DD
Docker Desktop
Docker
8.4
0%
May 25Docker Desktop 4.3.0 has Incorrect Access Control
CVE-2022-26659
DD
Docker Desktop
Docker
7.1
0%
Mar 25Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer…
CVE-2022-25365
DO
Docker
Docker
7.8
1%
Feb 19Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files
CVE-2022-23774
DD
Docker Desktop
Docker
5.3
1%
Feb 1Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files
CVE-2021-45449
DD
Docker Desktop
Docker
5.5
0%
Jan 12Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login
CVE-2021-41092
CL
Command Line Interface
Docker
7.5
2%
Oct 4Docker CLI is the command line interface for the docker container runtime
CVE-2021-37841
DE
Desktop
Docker
7.8
1%
Aug 12Docker Desktop before 3.6.0 suffers from incorrect access control
CVE-2021-21285
DO
Docker
Docker
6.5
3%
Feb 2In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon
CVE-2021-21284
DO
Docker
Docker
6.8
1%
Feb 2In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root
CVE-2021-3162
DO
Docker
Docker
7.8
0%
Jan 15Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation