Product by Docker
Docker Desktop
37 known vulnerabilities in Docker Desktop (Docker), 0 of them actively exploited (CISA KEV).
Key figures
37
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-9074 | Docker Desktop allows unauthenticated access to Docker Engine API from containers | — | |
| Critical | CVE-2024-8695 | Docker Desktop: Cross-site Scripting | 9.8 | |
| Critical | CVE-2024-8696 | Docker Desktop: Cross-site Scripting | 9.8 | |
| High | CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | — | |
| High | CVE-2026-106581 | Docker Desktop for Windows installer failed to verify external packages | — | |
| Critical | CVE-2023-0626 | Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route | 8.0 | |
| Critical | CVE-2023-0625 | Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog | 8.0 | |
| High | CVE-2020-11492 | Docker Desktop: security vulnerability | 7.8 | |
| High | CVE-2023-5166 | Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL | 8.0 | |
| High | CVE-2024-9348 | Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view | — | |
| High | CVE-2026-5843 | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading | 8.2 | |
| High | CVE-2026-5817 | Docker Desktop: Inclusion of Functionality from Untrusted Control Sphere | 8.2 | |
| High | CVE-2026-6406 | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag | 8.8 | |
| High | CVE-2020-15360 | Docker Desktop: Privilege Escalation | 7.8 | |
| High | CVE-2026-8936 | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | — | |
| High | CVE-2024-6222 | Docker Desktop: Improper Restriction of Communication Channel to Intended Endpoints | 7.0 | |
| Medium | CVE-2026-114409 | Docker Desktop logs can expose stored third-party credentials | — | |
| Medium | CVE-2022-23774 | Docker Desktop: security vulnerability | 5.3 | |
| High | CVE-2025-9164 | Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows | — | |
| High | CVE-2025-10657 | Docker Desktop with ECI Fails to Enforce Socket Command Restrictions | — | |
| High | CVE-2026-2664 | Out of bounds read vulnerability in grpcfuse kernel module | 7.8 | |
| High | CVE-2025-13743 | Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs | 7.5 | |
| High | CVE-2025-3224 | Docker Desktop: Link Following | 7.8 | |
| High | CVE-2023-1802 | Docker Desktop: Cleartext Transmission of Sensitive Information | 5.9 | |
| High | CVE-2023-0633 | In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE | 7.2 |