Docker Docker Desktop vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20259
4. 20269

Newest CVEs

• CVE-2026-112917

  Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

  Docker · Docker Desktop

  Critical9.2
• CVE-2026-114409

  Docker Desktop logs can expose stored third-party credentials

  Docker · Docker Desktop

  Medium5.7
• CVE-2026-106581

  Docker Desktop for Windows installer failed to verify external packages

  Docker · Docker Desktop

  High8.2
• CVE-2026-17106

  Tar extraction in moby/go-archive can write outside the destination directory via link following

  moby · go-archive

  High7.1
• CVE-2026-8936

  Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

  Docker · Docker Desktop

  High8.2
• CVE-2026-5843

  Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

  Docker · Docker Desktop

  High8.8
• CVE-2026-5817

  Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

  Docker · Docker Desktop

  High8.8
• CVE-2026-6406

  Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

  Docker · Docker Desktop

  High8.8
• CVE-2026-2664

  Out of bounds read vulnerability in grpcfuse kernel module

  Docker · Docker Desktop

  Medium6.8
• CVE-2025-13743

  Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs

  Docker · Docker Desktop

  Low2.4