# cve.now: Docker

The newest entries naming Docker as an affected vendor (up to 200), of 65 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-115538](https://cve.now/CVE-2026-115538.md): Docker Engine overlay-network encryption rules are not restored after a firewalld reload (CVSS 7.0)
- [CVE-2026-115539](https://cve.now/CVE-2026-115539.md): Cluster-API proxy overwrites forwarded client identity with its own (CVSS 7.7)
- [CVE-2026-123082](https://cve.now/CVE-2026-123082.md): Docker Desktop logs can expose the Docker Hub access token (CVSS 5.7)
- [CVE-2026-121541](https://cve.now/CVE-2026-121541.md): Bake filesystem path entitlements approval can be skipped in some multi-target builds (CVSS 5.6)
- [CVE-2026-121542](https://cve.now/CVE-2026-121542.md): Bake filesystem path entitlements approval can be skipped for path using basename prefix (CVSS 1.8)
- [CVE-2026-121614](https://cve.now/CVE-2026-121614.md): Docker Sandboxes host Git executes repository-controlled programs (CVSS 7.1)
- [CVE-2026-93325](https://cve.now/CVE-2026-93325.md): Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx (CVSS 7.3)
- [CVE-2026-112917](https://cve.now/CVE-2026-112917.md): Docker Desktop WSL2 AF\_VSOCK isolation bypass via 32-bit socketcall (CVSS 9.2)
- [CVE-2026-103916](https://cve.now/CVE-2026-103916.md): Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory (CVSS 8.4)
- [CVE-2026-114409](https://cve.now/CVE-2026-114409.md): Docker Desktop logs can expose stored third-party credentials (CVSS 5.7)
- [CVE-2026-105445](https://cve.now/CVE-2026-105445.md): Docker Hub account conversion could reassign an active personal access token to another user (CVSS 9.4)
- [CVE-2026-106581](https://cve.now/CVE-2026-106581.md): Docker Desktop for Windows installer failed to verify external packages (CVSS 8.2)
- [CVE-2026-105452](https://cve.now/CVE-2026-105452.md): Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts (CVSS 5.9)
- [CVE-2026-101998](https://cve.now/CVE-2026-101998.md): Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials (CVSS 5.9)
- [CVE-2026-105570](https://cve.now/CVE-2026-105570.md): Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host (CVSS 6.7)
- [CVE-2026-92543](https://cve.now/CVE-2026-92543.md): Docker Engine insecure-registry fallback via malicious DNS responses (CVSS 7.6)
- [CVE-2026-92542](https://cve.now/CVE-2026-92542.md): Blind VXLAN injection into encrypted overlay networks from cluster peer (CVSS 6.9)
- [CVE-2026-103433](https://cve.now/CVE-2026-103433.md): Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions (CVSS 6.9)
- [CVE-2026-79994](https://cve.now/CVE-2026-79994.md): Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race (CVSS 8.7)
- [CVE-2026-55887](https://cve.now/CVE-2026-55887.md): MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway (CVSS 8.7)
- [CVE-2026-77179](https://cve.now/CVE-2026-77179.md): Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback (CVSS 9.4)
- [CVE-2026-17106](https://cve.now/CVE-2026-17106.md): Tar extraction in moby/go-archive can write outside the destination directory via link following (CVSS 7.1)
- [CVE-2026-18171](https://cve.now/CVE-2026-18171.md): Docker Sandboxes read-only runtime mount writable through its shared-export alias (CVSS 5.7)
- [CVE-2026-12539](https://cve.now/CVE-2026-12539.md): Docker Sandboxes ICMP egress restriction bypass after daemon restart (CVSS 5.1)
- [CVE-2026-12039](https://cve.now/CVE-2026-12039.md): Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution (CVSS 5.7)
- [CVE-2026-41567](https://cve.now/CVE-2026-41567.md): Docker: \`PUT /containers/{id}/archive\` executes container binary on the host (CVSS 7.2)
- [CVE-2026-8936](https://cve.now/CVE-2026-8936.md): Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM (CVSS 8.2)
- [CVE-2026-5843](https://cve.now/CVE-2026-5843.md): Docker Model Runner container-to-host code execution via MLX-LM model\_file importlib loading (CVSS 8.8)
- [CVE-2026-5817](https://cve.now/CVE-2026-5817.md): Docker Model Runner container-to-host code execution via unsandboxed trust\_remote\_code in Python inference backends (CVSS 8.8)
- [CVE-2026-6406](https://cve.now/CVE-2026-6406.md): Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag (CVSS 8.8)
- [CVE-2026-33990](https://cve.now/CVE-2026-33990.md): Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) (CVSS 6.8)
- [CVE-2025-15558](https://cve.now/CVE-2025-15558.md): Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.0)
- [CVE-2026-28400](https://cve.now/CVE-2026-28400.md): Docker Model Runner Unauthenticated Runtime Flag Injection via \_configure Endpoint (CVSS 7.6)
- [CVE-2026-2664](https://cve.now/CVE-2026-2664.md): Out of bounds read vulnerability in grpcfuse kernel module (CVSS 6.8)
- [CVE-2025-14740](https://cve.now/CVE-2025-14740.md): Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities (CVSS 6.7)
- [CVE-2025-13743](https://cve.now/CVE-2025-13743.md): Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs (CVSS 2.4)
- [CVE-2025-64443](https://cve.now/CVE-2025-64443.md): DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode (CVSS 7.3)
- [CVE-2025-62725](https://cve.now/CVE-2025-62725.md): Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations (CVSS 8.9)
- [CVE-2025-9164](https://cve.now/CVE-2025-9164.md): Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows (CVSS 8.8)
- [CVE-2025-10657](https://cve.now/CVE-2025-10657.md): Docker Desktop with ECI Fails to Enforce Socket Command Restrictions (CVSS 8.7)
- [CVE-2025-9074](https://cve.now/CVE-2025-9074.md): Docker Desktop allows unauthenticated access to Docker Engine API from containers (CVSS 9.3)
- [CVE-2025-6587](https://cve.now/CVE-2025-6587.md): Exposure of system environment variables in Docker Desktop diagnostic logs (CVSS 5.2)
- [CVE-2025-3911](https://cve.now/CVE-2025-3911.md): Exposure in Docker Desktop logs of environment variables configured for running containers (CVSS 5.2)
- [CVE-2025-4095](https://cve.now/CVE-2025-4095.md): Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile (CVSS 4.3)
- [CVE-2025-3224](https://cve.now/CVE-2025-3224.md): Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion (CVSS 7.3)
- [CVE-2025-0495](https://cve.now/CVE-2025-0495.md): Secrets leakage to telemetry endpoint via cache backend configuration via buildx (CVSS 4.1)
- [CVE-2025-1696](https://cve.now/CVE-2025-1696.md): Exposure of Proxy Credentials in Docker Desktop Logs (CVSS 5.2)
- [CVE-2024-9348](https://cve.now/CVE-2024-9348.md): Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view (CVSS 8.9)
- [CVE-2024-8696](https://cve.now/CVE-2024-8696.md): A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 8.9)
- [CVE-2024-8695](https://cve.now/CVE-2024-8695.md): A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. (CVSS 9.0)
- [CVE-2024-6222](https://cve.now/CVE-2024-6222.md): In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages (CVSS 7.3)
- [CVE-2024-5652](https://cve.now/CVE-2024-5652.md): In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode (CVSS 6.1)
- [CVE-2023-0633](https://cve.now/CVE-2023-0633.md): In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE (CVSS 7.2)
- [CVE-2023-0627](https://cve.now/CVE-2023-0627.md): Docker Desktop 4.11.x allows --no-windows-containers flag bypass (CVSS 6.7)
- [CVE-2023-0626](https://cve.now/CVE-2023-0626.md): Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route (CVSS 8.0)
- [CVE-2023-0625](https://cve.now/CVE-2023-0625.md): Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog (CVSS 8.0)
- [CVE-2023-5166](https://cve.now/CVE-2023-5166.md): Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL (CVSS 8.0)
- [CVE-2023-5165](https://cve.now/CVE-2023-5165.md): Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell (CVSS 7.1)
- [CVE-2023-1802](https://cve.now/CVE-2023-1802.md): In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed (CVSS 5.9)
- [CVE-2023-0629](https://cve.now/CVE-2023-0629.md): Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers (CVSS 7.1)
- [CVE-2023-0628](https://cve.now/CVE-2023-0628.md): Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL (CVSS 6.1)
- [CVE-2021-41092](https://cve.now/CVE-2021-41092.md): Docker CLI leaks private registry credentials to registry-1.docker.io (CVSS 5.4)
- [CVE-2014-8179](https://cve.now/CVE-2014-8179.md): Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON re (no CVSS)
- [CVE-2014-8178](https://cve.now/CVE-2014-8178.md): Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes (no CVSS)
- [CVE-2019-1020014](https://cve.now/CVE-2019-1020014.md): docker-credential-helpers before 0.6.3 has a double free in the List functions. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/docker
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.