Product by Docker Inc.
Docker Desktop
11 known vulnerabilities in Docker Desktop (Docker Inc.), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-0626 | Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route | 8.0 | |
| Critical | CVE-2023-0625 | Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog | 8.0 | |
| High | CVE-2023-5166 | Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL | 8.0 | |
| High | CVE-2024-6222 | Docker Desktop: Improper Restriction of Communication Channel to Intended Endpoints | 7.0 | |
| Medium | CVE-2025-14740 | Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities | 6.7 | |
| High | CVE-2023-0633 | In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE | 7.2 | |
| High | CVE-2023-5165 | Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell | 7.1 | |
| Medium | CVE-2024-5652 | Docker Desktop: Denial of Service | 6.1 | |
| High | CVE-2023-0627 | Docker Desktop 4.11.x allows --no-windows-containers flag bypass | 6.7 | |
| High | CVE-2023-0629 | Docker Desktop: Trust Boundary Violation | 7.1 | |
| High | CVE-2023-0628 | Docker Desktop: Command Injection | 6.1 |