Login Request a demo
DD
Product
Docker Desktop
by Docker · last CVE Jun 2, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news2Timeline
Severity mix
Critical 5High 19Medium 7Low 0
Severity
All severities31Critical5High19Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Docker Desktop to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5166
6.5
1%
Sep 25
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
Affected: before 4.23.0
CVE-2021-45449
5.5
0%
Jan 12
Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login
Affected: 4.3.0; 4.3.1
CVE-2022-23774
5.3
1%
Feb 1
Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files
Affected: before 4.4.4
CVE-2025-6587
5.2
0%
Jul 3
Exposure of system environment variables in Docker Desktop diagnostic logs
Affected: before 4.43.0
CVE-2025-3911
5.2
0%
Apr 29
Exposure in Docker Desktop logs of environment variables configured for running containers
Affected: before 4.41.0
CVE-2025-1696
5.2
0%
Mar 6
Exposure of Proxy Credentials in Docker Desktop Logs
Affected: before 4.39.0
CVE-2025-4095
4.3
0%
Apr 29
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
Affected: 4.36.0 before 4.41.0
Showing 7