DD
Product
Docker Desktop
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
VulnerabilityHigh
ZDI-26-125: Docker Desktop grpcfuse Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-2664.
Feb 25, 2026·Zero Day Initiative