Advisories · Technology
Docker Desktop.
Every CVE that names Docker Desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall
- Docker Desktop
- CWE-424
- CVSS 5.7 Medium
Docker Desktop logs can expose stored third-party credentials
- Docker Desktop
- Information disclosure
- CVSS 8.2 High
Docker Desktop for Windows installer failed to verify external packages
- Docker Desktop
- Weak cryptography or TLS
- CVSS 8.2 High
Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM
- Docker Desktop
- Denial of service
- CVSS 8.8 High
Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading
- Docker Desktop
- CWE-829
- CVSS 8.8 High
Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends
- Docker Desktop
- CWE-829
- CVSS 8.8 High
Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
- Docker Desktop
- Broken access control
- CVSS 6.8 Medium
Out of bounds read vulnerability in grpcfuse kernel module
- Docker Desktop
- Memory corruption
- CVSS 2.4 Low
Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
- Docker Desktop
- Information disclosure
- CVSS 8.8 High
Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
- Docker Desktop
- CWE-427
- CVSS 8.7 High
Docker Desktop with ECI Fails to Enforce Socket Command Restrictions
- Docker Desktop
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+
Docker Desktop allows unauthenticated access to Docker Engine API from containers
- Docker Desktop
- Information disclosure
- CVSS 5.2 Medium
Exposure of system environment variables in Docker Desktop diagnostic logs
- Docker Desktop
- Information disclosure
- CVSS 5.2 Medium
Exposure in Docker Desktop logs of environment variables configured for running containers
- Docker Desktop
- Information disclosure
- CVSS 4.3 Medium
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
- Docker Desktop
- Broken access control
- CVSS 7.3 High
Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion
- Docker Desktop
- Path traversal
- Privilege escalation
- CVSS 5.2 Medium
Exposure of Proxy Credentials in Docker Desktop Logs
- Docker Desktop
- Information disclosure
- CVSS 8.9 High
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
- Docker Desktop
- CWE-20
- CWE-116
- CVSS 8.9 High
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
- Docker Desktop
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.0 CriticalCritical · CVSS 9+
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
- Docker Desktop
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.9 Medium
In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed
- Docker Desktop
- Weak cryptography or TLS