Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,313All CVEsplus 18,889 rejected
- 585Last 24 hours2,952 in the last 7 days
- 17,317Last 30 days1,581 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 15 | 12 | 1 | 0 | 31 | 51 |
| 2025 | 1 | 5 | 5 | 1 | 0 | 12 | 20 |
| 2024 | 1 | 2 | 0 | 0 | 0 | 3 | 8 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 5 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 4 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2019 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-121541 | Bake filesystem path entitlements approval can be skipped in some multi-target buildsDocker · Docker Buildx | Medium5.6 |
| CVE-2026-121542 | Bake filesystem path entitlements approval can be skipped for path using basename prefixDocker · Docker Buildx | Low1.8 |
| CVE-2026-121614 | Docker Sandboxes host Git executes repository-controlled programsDocker · Docker Sandboxes | High7.1 |
| CVE-2026-93325 | Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker BuildxDocker · Docker Buildx | High7.3 |
| CVE-2026-112917 | Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallDocker · Docker Desktop | Critical9.2 |
| CVE-2026-103916 | Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryDocker · Docker Sandboxes | High8.4 |
| CVE-2026-114409 | Docker Desktop logs can expose stored third-party credentialsDocker · Docker Desktop | Medium5.7 |
| CVE-2026-105445 | Docker Hub account conversion could reassign an active personal access token to another userDocker · Docker Hub | Critical9.4 |
| CVE-2026-106581 | Docker Desktop for Windows installer failed to verify external packagesDocker · Docker Desktop | High8.2 |
| CVE-2026-105452 | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsDocker · Docker Sandboxes | Medium5.9 |
| CVE-2026-101998 | Fail-open response masking in Docker Sandboxes can expose proxy-managed credentialsDocker · Docker Sandboxes | Medium5.9 |
| CVE-2026-105570 | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostDocker · Docker Sandboxes | Medium6.7 |
| CVE-2026-92543 | Docker Engine insecure-registry fallback via malicious DNS responsesDocker · Docker Engine | High7.6 |
| CVE-2026-92542 | Blind VXLAN injection into encrypted overlay networks from cluster peerDocker · Docker Engine | Medium6.9 |
| CVE-2026-103433 | Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsDocker · Docker Buildx | Medium6.9 |
| CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker · Docker Sandboxes | High8.7 |
| CVE-2026-55887 | MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gatewaydocker · mcp-gateway | High8.7 |
| CVE-2026-77179 | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker · Docker Sandboxes | Critical9.4 |
| CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link followingmoby · go-archive | High7.1 |
| CVE-2026-18171 | Docker Sandboxes read-only runtime mount writable through its shared-export aliasDocker · Docker Sandboxes | Medium5.7 |
| CVE-2026-12539 | Docker Sandboxes ICMP egress restriction bypass after daemon restartDocker · Docker Sandboxes | Medium5.1 |
| CVE-2026-12039 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionDocker · Docker Sandboxes | Medium5.7 |
| CVE-2026-41567 | Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby · moby/v2/daemon | High7.2 |
| CVE-2026-8936 | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMDocker · Docker Desktop | High8.2 |
| CVE-2026-5843 | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingDocker · Docker Desktop | High8.8 |
| CVE-2026-5817 | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsDocker · Docker Desktop | High8.8 |
| CVE-2026-6406 | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagDocker · Docker Desktop | High8.8 |
| CVE-2026-33990 | Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)docker · model-runner | Medium6.8 |
| CVE-2025-15558 | Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityDocker · Docker CLI | High7.0 |
| CVE-2026-28400 | Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpointdocker · model-runner | High7.6 |
| CVE-2026-2664 | Out of bounds read vulnerability in grpcfuse kernel moduleDocker · Docker Desktop | Medium6.8 |
| CVE-2025-13743 | Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsDocker · Docker Desktop | Low2.4 |
| CVE-2025-64443 | DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming modedocker · mcp-gateway | High7.3 |
| CVE-2025-62725 | Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotationsdocker · compose | High8.9 |
| CVE-2025-9164 | Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsDocker · Docker Desktop | High8.8 |
| CVE-2025-10657 | Docker Desktop with ECI Fails to Enforce Socket Command RestrictionsDocker · Docker Desktop | High8.7 |
| CVE-2025-9074 | Docker Desktop allows unauthenticated access to Docker Engine API from containersDocker · Docker Desktop | Critical9.3 |
| CVE-2025-6587 | Exposure of system environment variables in Docker Desktop diagnostic logsDocker · Docker Desktop | Medium5.2 |
| CVE-2025-3911 | Exposure in Docker Desktop logs of environment variables configured for running containersDocker · Docker Desktop | Medium5.2 |
| CVE-2025-4095 | Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profileDocker · Docker Desktop | Medium4.3 |
| CVE-2025-3224 | Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionDocker · Docker Desktop | High7.3 |
| CVE-2025-0495 | Secrets leakage to telemetry endpoint via cache backend configuration via buildxdocker · buildx | Medium4.1 |
| CVE-2025-1696 | Exposure of Proxy Credentials in Docker Desktop LogsDocker · Docker Desktop | Medium5.2 |
| CVE-2024-9348 | Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewDocker · Docker Desktop | High8.9 |
| CVE-2024-8696 | A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.Docker · Docker Desktop | High8.9 |
| CVE-2024-8695 | A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.Docker · Docker Desktop | Critical9.0 |
| CVE-2023-1802 | In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedDocker · Docker Desktop | Medium5.9 |
| CVE-2021-41092 | Docker CLI leaks private registry credentials to registry-1.docker.iodocker · cli | Medium5.4 |
| CVE-2014-8179 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during…Docker · Docker Engine | High7.5 |
| CVE-2014-8178 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for…Docker · Docker Engine | Medium5.5 |