Product by Docker
Docker Desktop
20 known vulnerabilities in Docker Desktop (Docker), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-8695 | Docker Desktop: Cross-site Scripting | 9.8 | |
| Critical | CVE-2024-8696 | Docker Desktop: Cross-site Scripting | 9.8 | |
| High | CVE-2025-31133 | runc container escape via "masked path" abuse due to mount race conditions | 7.8 | |
| High | CVE-2025-52565 | container escape due to /dev/console mount and related races | 7.5 | |
| Medium | CVE-2020-10665 | Docker Desktop: Privilege Escalation | 6.7 | |
| High | CVE-2025-52881 | runc: LSM labels can be bypassed with malicious config using dummy procfs files | 7.5 | |
| High | CVE-2026-106581 | Docker Desktop for Windows installer failed to verify external packages | — | |
| High | CVE-2021-37841 | Docker Desktop: Improper Access Control | 7.8 | |
| Medium | CVE-2026-53495 | containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service | — | |
| High | CVE-2026-8936 | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | — | |
| High | CVE-2024-6222 | Docker Desktop: Improper Restriction of Communication Channel to Intended Endpoints | 7.0 | |
| Medium | CVE-2026-114409 | Docker Desktop logs can expose stored third-party credentials | — | |
| High | CVE-2026-2664 | Out of bounds read vulnerability in grpcfuse kernel module | 7.8 | |
| High | CVE-2025-3224 | Docker Desktop: Link Following | 7.8 | |
| High | CVE-2023-1802 | Docker Desktop: Cleartext Transmission of Sensitive Information | 5.9 | |
| High | CVE-2022-37326 | Docker Desktop: Privilege Escalation | 7.8 | |
| Medium | CVE-2024-5652 | Docker Desktop: Denial of Service | 6.1 | |
| High | CVE-2022-34292 | Docker Desktop: security vulnerability | 7.1 | |
| High | CVE-2022-31647 | Docker Desktop: security vulnerability | 7.1 | |
| Medium | CVE-2022-38730 | Docker Desktop: Race Condition | 6.3 |