Product by Docker

    Docker Desktop

    20 known vulnerabilities in Docker Desktop (Docker), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Docker Desktop (Docker)
    CriticalCVE-2024-8695

    Docker Desktop: Cross-site Scripting

    also in 1 other product

    9.8
    CriticalCVE-2024-8696

    Docker Desktop: Cross-site Scripting

    also in 1 other product

    9.8
    HighCVE-2025-31133

    runc container escape via "masked path" abuse due to mount race conditions

    also in 7 other products

    7.8
    HighCVE-2025-52565

    container escape due to /dev/console mount and related races

    also in 8 other products

    7.5
    MediumCVE-2020-10665

    Docker Desktop: Privilege Escalation

    6.7
    HighCVE-2025-52881

    runc: LSM labels can be bypassed with malicious config using dummy procfs files

    also in 8 other products

    7.5
    HighCVE-2026-106581

    Docker Desktop for Windows installer failed to verify external packages

    also in 1 other product

    —
    HighCVE-2021-37841

    Docker Desktop: Improper Access Control

    7.8
    MediumCVE-2026-53495

    containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

    also in 1 other product

    —
    HighCVE-2026-8936

    Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

    also in 1 other product

    —
    HighCVE-2024-6222

    Docker Desktop: Improper Restriction of Communication Channel to Intended Endpoints

    also in 1 other product

    7.0
    MediumCVE-2026-114409

    Docker Desktop logs can expose stored third-party credentials

    also in 1 other product

    —
    HighCVE-2026-2664

    Out of bounds read vulnerability in grpcfuse kernel module

    also in 1 other product

    7.8
    HighCVE-2025-3224

    Docker Desktop: Link Following

    also in 1 other product

    7.8
    HighCVE-2023-1802

    Docker Desktop: Cleartext Transmission of Sensitive Information

    also in 1 other product

    5.9
    HighCVE-2022-37326

    Docker Desktop: Privilege Escalation

    7.8
    MediumCVE-2024-5652

    Docker Desktop: Denial of Service

    also in 1 other product

    6.1
    HighCVE-2022-34292

    Docker Desktop: security vulnerability

    7.1
    HighCVE-2022-31647

    Docker Desktop: security vulnerability

    7.1
    MediumCVE-2022-38730

    Docker Desktop: Race Condition

    6.3

    All products by Docker