Skip to content
OpenAdvisories

Product · Docker

Docker Desktop

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-112917

    Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

    In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The …

    Docker Docker Desktop
  • Critical 9.3
    CVE-2025-9074 Public exploit

    Docker Desktop allows unauthenticated access to Docker Engine API from containers

    A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolati…

    Docker Docker Desktop
  • Critical 9.0
    CVE-2024-8695

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

    Docker Docker Desktop