Login Request a demo
DO
Vendor
Docker
39 products with CVEs on record
143
CVEs
2
On KEV
10
New 30D
Products
DS
Docker Sandboxes
Docker
9.4
9 CVEs0 on KEV3 new
DD
Docker Desktop
Docker
9.8
17 CVEs0 on KEV2 new
DH
Docker Hub
Docker
9.4
1 CVEs0 on KEV1 new
DE
Docker Engine
Docker
7.6
3 CVEs0 on KEV2 new
DB
Docker Buildx
Docker
6.9
1 CVEs0 on KEV1 new
DE
Docker Engine overlay network driver
Docker
6.9
1 CVEs0 on KEV1 new
DO
Docker
Docker
9.8
37 CVEs1 on KEV0 new
DC
Desktop Community Edition
Docker
7.8
1 CVEs1 on KEV0 new
DD
Docker Desktop
Docker
9.8
31 CVEs0 on KEV0 new
EN
Engine
Docker
8.1
6 CVEs0 on KEV0 new
CL
Command Line Interface
Docker
8.0
2 CVEs0 on KEV0 new
CE
CS Engine
Docker
7.5
2 CVEs0 on KEV0 new
DC
Docker CLI
Docker
8.0
2 CVEs0 on KEV0 new
LI
Libcontainer
Docker
7.8
2 CVEs0 on KEV0 new
MC
mcp-gateway
docker
9.6
2 CVEs0 on KEV0 new
MO
model-runner
docker
9.1
2 CVEs0 on KEV0 new
NO
Notary
Docker
9.8
2 CVEs0 on KEV0 new
AD
Adminer
Docker
9.8
1 CVEs0 on KEV0 new
BU
buildx
docker
4.1
1 CVEs0 on KEV0 new
CO
compose
docker
8.9
1 CVEs0 on KEV0 new
CD
Composer Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
CH
Credential Helpers
Docker
5.5
1 CVEs0 on KEV0 new
CL
Crux Linux Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
DC
Docker Compose
Docker
7.1
1 CVEs0 on KEV0 new
DO
docker/daemon
docker
7.2
1 CVEs0 on KEV0 new
DO
Docker-py
Docker
–
1 CVEs0 on KEV0 new
DR
Docker Registry
Docker
7.5
1 CVEs0 on KEV0 new
DO
Docs
Docker
9.8
1 CVEs0 on KEV0 new
EA
Elixir Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
GA
Ghost Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
HD
Haproxy Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
MA
Machine
Docker
6.5
1 CVEs0 on KEV0 new
MD
Memcached Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
MO
Moby
Docker
9.9
1 CVEs0 on KEV0 new
ND
Notary Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
RD
Rabbitmq Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
RE
Registry
Docker
9.8
1 CVEs0 on KEV0 new
SA
Spiped Alpine Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
SD
Storm Docker Image
Docker
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114409
New
DD
Docker Desktop
Docker
5.7
0%
Oct 27Docker Desktop logs can expose stored third-party credentials
CVE-2026-105445
DH
Docker Hub
Docker
9.4
0%
Oct 13Docker Hub account conversion could reassign an active personal access token to another user
CVE-2026-106581
DD
Docker Desktop
Docker
7.3
0%
Oct 9Docker Desktop for Windows installer failed to verify external packages
CVE-2026-105452
DS
Docker Sandboxes
Docker
5.9
0%
Oct 8Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
CVE-2026-101998
DS
Docker Sandboxes
Docker
5.9
0%
Oct 8Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
CVE-2026-105570
DS
Docker Sandboxes
Docker
6.7
0%
Oct 8Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
CVE-2026-92543
DE
Docker Engine
Docker
7.6
0%
Oct 7Docker Engine insecure-registry fallback via malicious DNS responses
CVE-2026-92542
DE
Docker Engine
Docker
6.9
0%
Oct 7Blind VXLAN injection into encrypted overlay networks from cluster peer
CVE-2026-103433
DB
Docker Buildx
Docker
6.9
0%
Oct 5Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
CVE-2026-79994
DS
Docker Sandboxes
Docker
8.7
0%
Sep 15Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
CVE-2026-55887
MC
mcp-gateway
docker
8.7
0%
Sep 15MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway
CVE-2026-77179
DS
Docker Sandboxes
Docker
9.4
0%
Sep 15Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
CVE-2026-17106
DC
Docker CLI
Docker
7.1
0%
Aug 18Tar extraction in moby/go-archive can write outside the destination directory via link following
CVE-2026-18171
DS
Docker Sandboxes
Docker
5.7
0%
Aug 12Docker Sandboxes read-only runtime mount writable through its shared-export alias
CVE-2026-12539
DS
Docker Sandboxes
Docker
5.7
0%
Jun 18Docker Sandboxes ICMP egress restriction bypass after daemon restart
CVE-2026-12039
DS
Docker Sandboxes
Docker
5.7
0%
Jun 18Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
CVE-2026-42306
EN
Engine
Docker
7.2
0%
Jun 12Moby: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-41568
EN
Engine
Docker
6.1
0%
Jun 12Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41567
DO
docker/daemon
docker
7.2
0%
Jun 5Docker: `PUT /containers/{id}/archive` executes container binary on the host
CVE-2026-8936
DD
Docker Desktop
Docker
8.2
0%
Jun 2Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
CVE-2026-5843
DD
Docker Desktop
Docker
8.6
0%
May 22Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading
CVE-2026-5817
DD
Docker Desktop
Docker
8.6
0%
May 22Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends
CVE-2026-6406
DD
Docker Desktop
Docker
8.8
0%
May 22Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
CVE-2026-33990
MO
model-runner
docker
9.1
0%
Apr 1Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)
CVE-2026-33997
EN
Engine
Docker
8.1
0%
Mar 31Moby: Off-by-one error in plugin privilege validation
CVE-2026-34040
EN
Engine
Docker
7.8
9%
Mar 31Moby: AuthZ plugin bypass with oversized request body
CVE-2025-15558
DC
Docker CLI
Docker
8.0
1%
Mar 4Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2026-28400
MO
model-runner
docker
7.5
0%
Feb 27Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint
CVE-2026-2664
DD
Docker Desktop
Docker
7.8
0%
Feb 24Out of bounds read vulnerability in grpcfuse kernel module
CVE-2025-13743
DD
Docker Desktop
Docker
7.5
0%
Dec 9Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
CVE-2025-64443
MC
mcp-gateway
docker
9.6
0%
Dec 3DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
CVE-2025-62725
CO
compose
docker
8.9
14%
Oct 27Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
CVE-2025-9164
DD
Docker Desktop
Docker
8.8
0%
Oct 27Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
CVE-2025-10657
DD
Docker Desktop
Docker
8.7
0%
Sep 26Docker Desktop with ECI Fails to Enforce Socket Command Restrictions
CVE-2025-9074
DD
Docker Desktop
Docker
9.3
2%
Aug 20Docker Desktop allows unauthenticated access to Docker Engine API from containers
CVE-2025-6587
DD
Docker Desktop
Docker
5.2
0%
Jul 3Exposure of system environment variables in Docker Desktop diagnostic logs
CVE-2025-3911
DD
Docker Desktop
Docker
5.2
0%
Apr 29Exposure in Docker Desktop logs of environment variables configured for running containers
CVE-2025-4095
DD
Docker Desktop
Docker
4.3
0%
Apr 29Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
CVE-2025-3224
DD
Docker Desktop
Docker
7.8
0%
Apr 28Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion
CVE-2025-0495
BU
buildx
docker
4.1
0%
Mar 17Secrets leakage to telemetry endpoint via cache backend configuration via buildx
CVE-2025-1696
DD
Docker Desktop
Docker
5.2
0%
Mar 6Exposure of Proxy Credentials in Docker Desktop Logs
CVE-2024-9348
DD
Docker Desktop
Docker
8.9
0%
Oct 16Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
CVE-2024-8696
DD
Docker Desktop
Docker
9.8
1%
Sep 12A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
CVE-2024-8695
DD
Docker Desktop
Docker
9.8
1%
Sep 12A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
CVE-2024-41110
MO
Moby
Docker
9.9
16%
Jul 24Moby authz zero length regression
CVE-2024-6222
DE
Desktop
Docker
7.0
1%
Jul 9In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages
CVE-2024-5652
DE
Desktop
Docker
5.5
0%
Jul 9In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode
CVE-2023-40453
MA
Machine
Docker
6.5
1%
Nov 7Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administrator into performing…
CVE-2023-5166
DD
Docker Desktop
Docker
6.5
1%
Sep 25Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
CVE-2023-5165
DD
Docker Desktop
Docker
8.8
0%
Sep 25Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time…
CVE-2023-0633
DD
Docker Desktop
Docker
7.8
0%
Sep 25In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0
CVE-2023-0627
DD
Docker Desktop
Docker
7.8
0%
Sep 25Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop:…
CVE-2023-0626
DD
Docker Desktop
Docker
9.8
1%
Sep 25Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
CVE-2023-0625
DD
Docker Desktop
Docker
9.8
1%
Sep 25Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
CVE-2022-38730
DE
Desktop
Docker
6.3
0%
Apr 27Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the…
CVE-2022-37326
DE
Desktop
Docker
7.8
0%
Apr 27Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field…
CVE-2022-34292
DE
Desktop
Docker
7.1
0%
Apr 27Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder…
CVE-2022-31647
DE
Desktop
Docker
7.1
0%
Apr 27Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different…
CVE-2023-1802
DE
Desktop
Docker
7.5
1%
Apr 6In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targeted network sniffing…
CVE-2023-0629
DD
Docker Desktop
Docker
7.1
0%
Mar 13Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or…