# Docker Desktop.

Every CVE that names Docker Desktop among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall](https://agentprime.io/advisories/CVE-2026-112917.md)
  `CVE-2026-112917` · CVE record: Docker Docker Desktop · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-424
- [Docker Desktop logs can expose stored third-party credentials](https://agentprime.io/advisories/CVE-2026-114409.md)
  `CVE-2026-114409` · CVE record: Docker Docker Desktop · CVSS 5.7 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Information disclosure
- [Docker Desktop for Windows installer failed to verify external packages](https://agentprime.io/advisories/CVE-2026-106581.md)
  `CVE-2026-106581` · CVE record: Docker Docker Desktop · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Weak cryptography or TLS
- [Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM](https://agentprime.io/advisories/CVE-2026-8936.md)
  `CVE-2026-8936` · CVE record: Docker Docker Desktop · CVSS 8.2 High · Not analysed yet · Published 2 Jun 2026 · Tags: Denial of service
- [Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading](https://agentprime.io/advisories/CVE-2026-5843.md)
  `CVE-2026-5843` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 22 May 2026 · Tags: CWE-829
- [Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends](https://agentprime.io/advisories/CVE-2026-5817.md)
  `CVE-2026-5817` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 22 May 2026 · Tags: CWE-829
- [Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag](https://agentprime.io/advisories/CVE-2026-6406.md)
  `CVE-2026-6406` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 22 May 2026 · Tags: Broken access control
- [Out of bounds read vulnerability in grpcfuse kernel module](https://agentprime.io/advisories/CVE-2026-2664.md)
  `CVE-2026-2664` · CVE record: Docker Docker Desktop · CVSS 6.8 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption
- [Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs](https://agentprime.io/advisories/CVE-2025-13743.md)
  `CVE-2025-13743` · CVE record: Docker Docker Desktop · CVSS 2.4 Low · Not analysed yet · Published 9 Dec 2025 · Tags: Information disclosure
- [Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows](https://agentprime.io/advisories/CVE-2025-9164.md)
  `CVE-2025-9164` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-427
- [Docker Desktop with ECI Fails to Enforce Socket Command Restrictions](https://agentprime.io/advisories/CVE-2025-10657.md)
  `CVE-2025-10657` · CVE record: Docker Docker Desktop · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2025 · Tags: Privilege escalation
- [Docker Desktop allows unauthenticated access to Docker Engine API from containers](https://agentprime.io/advisories/CVE-2025-9074.md)
  `CVE-2025-9074` · CVE record: Docker Docker Desktop · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2025 · Tags: Information disclosure
- [Exposure of system environment variables in Docker Desktop diagnostic logs](https://agentprime.io/advisories/CVE-2025-6587.md)
  `CVE-2025-6587` · CVE record: Docker Docker Desktop · CVSS 5.2 Medium · Not analysed yet · Published 3 Jul 2025 · Tags: Information disclosure
- [Exposure in Docker Desktop logs of environment variables configured for running containers](https://agentprime.io/advisories/CVE-2025-3911.md)
  `CVE-2025-3911` · CVE record: Docker Docker Desktop · CVSS 5.2 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Information disclosure
- [Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile](https://agentprime.io/advisories/CVE-2025-4095.md)
  `CVE-2025-4095` · CVE record: Docker Docker Desktop · CVSS 4.3 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: Broken access control
- [Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion](https://agentprime.io/advisories/CVE-2025-3224.md)
  `CVE-2025-3224` · CVE record: Docker Docker Desktop · CVSS 7.3 High · Not analysed yet · Published 28 Apr 2025 · Tags: Path traversal, Privilege escalation
- [Exposure of Proxy Credentials in Docker Desktop Logs](https://agentprime.io/advisories/CVE-2025-1696.md)
  `CVE-2025-1696` · CVE record: Docker Docker Desktop · CVSS 5.2 Medium · Not analysed yet · Published 6 Mar 2025 · Tags: Information disclosure
- [Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view](https://agentprime.io/advisories/CVE-2024-9348.md)
  `CVE-2024-9348` · CVE record: Docker Docker Desktop · CVSS 8.9 High · Not analysed yet · Published 16 Oct 2024 · Tags: CWE-20, CWE-116
- [A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.](https://agentprime.io/advisories/CVE-2024-8696.md)
  `CVE-2024-8696` · CVE record: Docker Docker Desktop · CVSS 8.9 High · Not analysed yet · Published 12 Sept 2024 · Tags: Cross-site scripting (XSS), Code injection
- [A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.](https://agentprime.io/advisories/CVE-2024-8695.md)
  `CVE-2024-8695` · CVE record: Docker Docker Desktop · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2024 · Tags: Cross-site scripting (XSS), Code injection
- [In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed](https://agentprime.io/advisories/CVE-2023-1802.md)
  `CVE-2023-1802` · CVE record: Docker Docker Desktop · CVSS 5.9 Medium · Not analysed yet · Published 6 Apr 2023 · Tags: Weak cryptography or TLS

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=docker-desktop>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/docker-desktop/>. Everything for agents: <https://agentprime.io/llms.txt>.