Docker vulnerabilities
The newest vulnerabilities affecting Docker, up to 200. Subscribe by RSS.
- CVE-2026-114409Docker Desktop logs can expose stored third-party credentialsDocker Desktop
- CVE-2026-116102QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injectionQuantGeekDev docker-mcp
- CVE-2026-116070Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/configdqzboy Docker-Proxy
- CVE-2026-105445Docker Hub account conversion could reassign an active personal access token to another userDocker Hub
- CVE-2026-95838containerd: Unpack DoS via repeated opaque whiteoutscontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-95837containerd CRI plugin: Checkpoint restore bypasses destination security contextcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-106581Docker Desktop for Windows installer failed to verify external packagesDocker Desktop
- CVE-2026-105452Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsDocker Sandboxes
- CVE-2026-101998Fail-open response masking in Docker Sandboxes can expose proxy-managed credentialsDocker Sandboxes
- CVE-2026-105570Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostDocker Sandboxes
- CVE-2026-92543Docker Engine insecure-registry fallback via malicious DNS responsesDocker Engine · Moby
- CVE-2026-92542Blind VXLAN injection into encrypted overlay networks from cluster peerDocker Engine · Moby overlay network driver
- CVE-2026-103433Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsDocker Buildx
- CVE-2026-82973Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailboxpsyb0t docker-mailbox
- CVE-2026-53493Containerd has image-pull DoS via crafted OCI index graph amplificationcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-79994Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker Sandboxes
- CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker Sandboxes
- CVE-2026-53495containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Servicecontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-78122docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container FilesystemsTecnativa docker-socket-proxy
- CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link followingmoby go-archive · Docker Sandboxes +5
- CVE-2026-18171Docker Sandboxes read-only runtime mount writable through its shared-export aliasDocker Sandboxes
- CVE-2026-53489containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restorecontainerd · github.com/containerd/containerd +1
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smugglingcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoningcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-47262containerd image-triggered runtime DoS via unbounded group parsingcontainerd · github.com/containerd/containerd +1
- CVE-2026-46680containerd user ID handling bypass allows runAsNonRoot evasioncontainerd · github.com/containerd/containerd +1
- CVE-2026-53488containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullcontainerd · github.com/containerd/containerd +1
- CVE-2026-41579runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsopencontainers runc · github.com/opencontainers/runc
- CVE-2026-12539Docker Sandboxes ICMP egress restriction bypass after daemon restartDocker Sandboxes
- CVE-2026-12039Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionDocker Sandboxes
- CVE-2026-42306Moby: Race condition in docker cp allows bind mount redirection to host pathmoby · github.com/docker/docker +2
- CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapmoby · github.com/docker/docker +2
- CVE-2026-41567Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby/v2/daemon · moby Docker Engine +4
- CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMDocker Desktop
- CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingDocker Desktop
- CVE-2026-5817Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsDocker Desktop
- CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagDocker Desktop
- CVE-2026-5741suvarchal docker-mcp-server HTTP index.ts pull_image os command injectionsuvarchal docker-mcp-server
- CVE-2026-33997Moby: Off-by-one error in plugin privilege validationmoby · github.com/docker/docker +2
- CVE-2026-34040Moby: AuthZ plugin bypass with oversized request bodymoby · github.com/moby/moby +2
- CVE-2025-15558Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityDocker CLI · Docker Compose +4
- CVE-2026-27887Spin has memory leaks in various WIT interfacesspinframework spin · spinframework SpinKube +1
- CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel moduleDocker Desktop
- CVE-2025-14740Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesDocker Desktop
- CVE-2025-13743Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsDocker Desktop
- CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leakcontainerd · github.com/containerd/containerd +1
- CVE-2025-52881runc: LSM labels can be bypassed with malicious config using dummy procfs filesopencontainers runc · github.com/opencontainers/runc +1
- CVE-2025-52565container escape due to /dev/console mount and related racesopencontainers runc · github.com/opencontainers/runc
- CVE-2025-31133runc container escape via "masked path" abuse due to mount race conditionsopencontainers runc · github.com/opencontainers/runc
- CVE-2024-25621containerd affected by a local privilege escalation via wide permissions on CRI directorycontainerd · github.com/containerd/containerd +1
- CVE-2025-9164Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsDocker Desktop
- CVE-2025-10657Docker Desktop with ECI Fails to Enforce Socket Command RestrictionsDocker Desktop
- CVE-2025-9074Docker Desktop allows unauthenticated access to Docker Engine API from containersDocker Desktop
- CVE-2025-54410Moby's Firewalld reload removes bridge network isolationmoby · github.com/docker/docker
- CVE-2025-54388Moby's Firewalld reload makes published container ports accessible from remote hostsmoby · github.com/docker/docker
- CVE-2025-7381Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic imagesDocker Mautic
- CVE-2025-6587Exposure of system environment variables in Docker Desktop diagnostic logsDocker Desktop
- CVE-2025-47291containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.containerd · github.com/containerd/containerd/v2
- CVE-2025-47290Containerd vulnerable to host filesystem access during image unpackcontainerd · github.com/containerd/containerd/v2
- CVE-2025-3911Exposure in Docker Desktop logs of environment variables configured for running containersDocker Desktop
- CVE-2025-4095Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profileDocker Desktop
- CVE-2025-3224Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionDocker Desktop
- CVE-2024-40635containerd has an integer overflow in User ID handlingcontainerd · github.com/containerd/containerd +1
- CVE-2025-1696Exposure of Proxy Credentials in Docker Desktop LogsDocker Desktop
- CVE-2024-36620moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.github.com/moby/moby
- CVE-2024-36621moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go.github.com/moby/moby
- CVE-2024-36623moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent writgithub.com/moby/moby
- CVE-2024-9348Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewDocker Desktop
- CVE-2024-8696A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.Docker Desktop
- CVE-2024-8695A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.Docker Desktop
- CVE-2024-45310runc can be confused to create empty files/directories on the hostopencontainers runc · github.com/opencontainers/runc
- CVE-2024-41110Moby authz zero length regressionmoby · github.com/moby/moby +1
- CVE-2024-6222In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messagesDocker Desktop
- CVE-2024-5652In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers modeDocker Desktop
- CVE-2024-32473Moby IPv6 enabled on IPv4-only network interfacesmoby · github.com/docker/docker
- CVE-2024-29018External DNS requests from 'internal' networks could lead to data exfiltrationmoby · github.com/docker/docker
- CVE-2024-24557Moby classic builder cache poisoningmoby · github.com/docker/docker +1
- CVE-2024-21626runc container breakout through process.cwd trickery and leaked fdsopencontainers runc · github.com/opencontainers/runc
- CVE-2023-0633In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPEDocker Desktop
- CVE-2023-0627Docker Desktop 4.11.x allows --no-windows-containers flag bypassDocker Desktop
- CVE-2023-0626Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route Docker Desktop
- CVE-2023-0625Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelogDocker Desktop
- CVE-2023-5166Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URLDocker Desktop
- CVE-2023-5165Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellDocker Desktop
- CVE-2023-1802In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedDocker Desktop
- CVE-2023-28840moby/moby's dockerd daemon encrypted overlay network may be unauthenticatedmoby · github.com/docker/docker
- CVE-2023-28841moby/moby's dockerd daemon encrypted overlay network traffic may be unencryptedmoby · github.com/docker/docker
- CVE-2023-28842moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticatedmoby · github.com/docker/docker
- CVE-2023-25809rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-28642AppArmor bypass with symlinked /proc in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-0629Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersDocker Desktop
- CVE-2023-0628Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URLDocker Desktop
- CVE-2023-27561runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.github.com/opencontainers/runc
- CVE-2023-25173containerd supplementary groups are not set up properlycontainerd · github.com/containerd/containerd
- CVE-2023-25153containerd OCI image importer memory exhaustioncontainerd · github.com/containerd/containerd
- CVE-2022-23471containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leakcontainerd · github.com/containerd/containerd
- CVE-2022-36109Moby vulnerability relating to supplementary group permissionsmoby · github.com/docker/docker
- CVE-2022-31030containerd CRI plugin: Host memory exhaustion through ExecSynccontainerd · github.com/containerd/containerd
- CVE-2022-29162Incorrect Default Permissions in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2022-24769Default inheritable capabilities for linux container should be emptymoby · github.com/moby/moby +1
- CVE-2022-23648Insecure handling of image volumes in containerd CRI plugincontainerd · github.com/containerd/containerd
- CVE-2021-43816Improper Preservation of Permissions in containerdcontainerd · github.com/containerd/containerd
- CVE-2021-43784Overflow in netlink bytemsg length field allows attacker to override netlink-based container configurationopencontainers runc · github.com/opencontainers/runc
- CVE-2021-23732Arbitrary Code Executiondocker-cli-js
- CVE-2021-41089`docker cp` allows unexpected chmod of host filesmoby · github.com/docker/docker +1
- CVE-2021-41091Insufficiently restricted permissions on data directory in Docker Enginemoby · github.com/docker/docker +1
- CVE-2021-41103Insufficiently restricted permissions on plugin directoriescontainerd · github.com/containerd/containerd
- CVE-2021-32760Archive package allows chmod of file outside of unpack target directorycontainerd · github.com/containerd/containerd
- CVE-2021-30465runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal.github.com/opencontainers/runc
- CVE-2021-21334environment variable leakcontainerd · github.com/containerd/containerd
- CVE-2021-21284privilege escalation in Mobymoby · github.com/moby/moby
- CVE-2021-21285Docker daemon crash during image pull of malicious imagemoby · github.com/moby/moby
- CVE-2020-27534util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathnagithub.com/moby/moby · github.com/docker/docker
- CVE-2020-15257containerd-shim API Exposed to Host Network Containerscontainerd · github.com/containerd/containerd
- CVE-2020-15157containerd can be coerced into leaking credentials during image pullcontainerd · github.com/containerd/containerd
- CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://aDocker
- CVE-2020-14298The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc miDocker
- CVE-2020-7606docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands.docker-compose-remote-api
- CVE-2019-19921runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.github.com/opencontainers/runc
- CVE-2014-8179Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON reDocker Engine · CS Docker Engine
- CVE-2014-8178Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes Docker Engine · CS Docker Engine
- CVE-2014-9356Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection megithub.com/docker/docker
- CVE-2019-16884runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/roogithub.com/opencontainers/runc · github.com/opencontainers/…
- CVE-2019-14271In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamicalgithub.com/docker/docker · github.com/moby/moby
- CVE-2019-1020014docker-credential-helpers before 0.6.3 has a double free in the List functions.docker-credential-helpers
- CVE-2019-13509In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode magithub.com/docker/docker
- CVE-2018-12608An issue was discovered in Docker Moby before 17.06.0.github.com/docker/docker
- CVE-2018-11757In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may aApache Software Foundation Docker Skeleton Runtime for Apac…
- CVE-2018-10892The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames.[UNKNOWN] docker
- CVE-2017-16539The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackegithub.com/moby/moby
- CVE-2016-9962RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container.github.com/opencontainers/runc
- CVE-2016-3697libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, whgithub.com/opencontainers/runc
- CVE-2015-3627Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allowsgithub.com/docker/docker
- CVE-2015-3629Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrgithub.com/docker/docker
- CVE-2015-3630Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, whigithub.com/docker/docker
- CVE-2015-3631Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows vgithub.com/docker/docker
- CVE-2014-9357Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in github.com/docker/docker
- CVE-2014-9358Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositogithub.com/docker/docker
- CVE-2014-6407Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attackgithub.com/docker/docker
- CVE-2014-6408Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container bgithub.com/docker/docker
- CVE-2014-5277Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-midocker-py · github.com/docker/docker
- CVE-2014-3499Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via ungithub.com/docker/docker