docker vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20192
3. 20211
4. 20231
5. 20243
6. 202513
7. 202630

Newest CVEs

• CVE-2026-121541

  Bake filesystem path entitlements approval can be skipped in some multi-target builds

  Docker · Docker Buildx

  Medium5.6
• CVE-2026-121542

  Bake filesystem path entitlements approval can be skipped for path using basename prefix

  Docker · Docker Buildx

  Low1.8
• CVE-2026-121614

  Docker Sandboxes host Git executes repository-controlled programs

  Docker · Docker Sandboxes

  High7.1
• CVE-2026-93325

  Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

  Docker · Docker Buildx

  High7.3
• CVE-2026-112917

  Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

  Docker · Docker Desktop

  Critical9.2
• CVE-2026-103916

  Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

  Docker · Docker Sandboxes

  High8.4
• CVE-2026-114409

  Docker Desktop logs can expose stored third-party credentials

  Docker · Docker Desktop

  Medium5.7
• CVE-2026-105445

  Docker Hub account conversion could reassign an active personal access token to another user

  Docker · Docker Hub

  Critical9.4
• CVE-2026-106581

  Docker Desktop for Windows installer failed to verify external packages

  Docker · Docker Desktop

  High8.2
• CVE-2026-105452

  Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

  Docker · Docker Sandboxes

  Medium5.9