Skip to content
OpenAdvisories

Vendor

Docker

65 known vulnerabilities.

Products

Docker Desktop 34 Docker Sandboxes 11 Docker Engine 7 Docker Buildx 4 Compose 2 model-runner 2 mcp-gateway 2 Docker CLI 2 CS Docker Engine 2 docker-credential-helpers 1 Docker Hub 1 Docker Compose 1 buildx 1 cli 1 docker/daemon 1 Docker Engine overlay network driver 1 Desktop 0 Sandboxes 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-112917

    Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

    In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The …

    Docker Docker Desktop
  • Critical 9.4
    CVE-2026-105445 Public exploit

    Docker Hub account conversion could reassign an active personal access token to another user

    An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the …

    Docker Docker Hub
  • Critical 9.4
    CVE-2026-77179 Public exploit

    Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

    On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbit…

    Docker Docker Sandboxes
  • Critical 9.3
    CVE-2025-9074 Public exploit

    Docker Desktop allows unauthenticated access to Docker Engine API from containers

    A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolati…

    Docker Docker Desktop
  • Critical 9.0
    CVE-2024-8695

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

    Docker Docker Desktop