agentprime: docker-desktopEvery new CVE for docker-desktop.https://agentprime.io/CVE-2026-112917: Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallhttps://agentprime.io/advisories/CVE-2026-112917/https://agentprime.io/advisories/CVE-2026-112917/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 19:08:11 GMTCVEcriticalCVE-2026-114409: Docker Desktop logs can expose stored third-party credentialshttps://agentprime.io/advisories/CVE-2026-114409/https://agentprime.io/advisories/CVE-2026-114409/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 12:25:57 GMTCVECVE-2026-106581: Docker Desktop for Windows installer failed to verify external packageshttps://agentprime.io/advisories/CVE-2026-106581/https://agentprime.io/advisories/CVE-2026-106581/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 13:40:18 GMTCVECVE-2026-8936: Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMhttps://agentprime.io/advisories/CVE-2026-8936/https://agentprime.io/advisories/CVE-2026-8936/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 21:09:03 GMTCVECVE-2026-5843: Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadinghttps://agentprime.io/advisories/CVE-2026-5843/https://agentprime.io/advisories/CVE-2026-5843/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 May 2026 19:28:38 GMTCVECVE-2026-5817: Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendshttps://agentprime.io/advisories/CVE-2026-5817/https://agentprime.io/advisories/CVE-2026-5817/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 May 2026 19:24:15 GMTCVECVE-2026-6406: Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flaghttps://agentprime.io/advisories/CVE-2026-6406/https://agentprime.io/advisories/CVE-2026-6406/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 May 2026 18:32:15 GMTCVECVE-2026-2664: Out of bounds read vulnerability in grpcfuse kernel modulehttps://agentprime.io/advisories/CVE-2026-2664/https://agentprime.io/advisories/CVE-2026-2664/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 10:09:18 GMTCVECVE-2025-13743: Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logshttps://agentprime.io/advisories/CVE-2025-13743/https://agentprime.io/advisories/CVE-2025-13743/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 20:39:52 GMTCVECVE-2025-9164: Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windowshttps://agentprime.io/advisories/CVE-2025-9164/https://agentprime.io/advisories/CVE-2025-9164/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 13:53:40 GMTCVECVE-2025-10657: Docker Desktop with ECI Fails to Enforce Socket Command Restrictionshttps://agentprime.io/advisories/CVE-2025-10657/https://agentprime.io/advisories/CVE-2025-10657/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 21:05:19 GMTCVECVE-2025-9074: Docker Desktop allows unauthenticated access to Docker Engine API from containershttps://agentprime.io/advisories/CVE-2025-9074/https://agentprime.io/advisories/CVE-2025-9074/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Aug 2025 13:28:35 GMTCVEcriticalCVE-2025-6587: Exposure of system environment variables in Docker Desktop diagnostic logshttps://agentprime.io/advisories/CVE-2025-6587/https://agentprime.io/advisories/CVE-2025-6587/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Jul 2025 10:03:27 GMTCVECVE-2025-3911: Exposure in Docker Desktop logs of environment variables configured for running containershttps://agentprime.io/advisories/CVE-2025-3911/https://agentprime.io/advisories/CVE-2025-3911/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Apr 2025 17:20:34 GMTCVECVE-2025-4095: Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profilehttps://agentprime.io/advisories/CVE-2025-4095/https://agentprime.io/advisories/CVE-2025-4095/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Apr 2025 17:16:16 GMTCVECVE-2025-3224: Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletionhttps://agentprime.io/advisories/CVE-2025-3224/https://agentprime.io/advisories/CVE-2025-3224/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Apr 2025 19:21:15 GMTCVECVE-2025-1696: Exposure of Proxy Credentials in Docker Desktop Logshttps://agentprime.io/advisories/CVE-2025-1696/https://agentprime.io/advisories/CVE-2025-1696/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Mar 2025 11:58:43 GMTCVECVE-2024-9348: Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewhttps://agentprime.io/advisories/CVE-2024-9348/https://agentprime.io/advisories/CVE-2024-9348/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 14:50:06 GMTCVECVE-2024-8696: A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.https://agentprime.io/advisories/CVE-2024-8696/https://agentprime.io/advisories/CVE-2024-8696/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 17:54:34 GMTCVECVE-2024-8695: A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.https://agentprime.io/advisories/CVE-2024-8695/https://agentprime.io/advisories/CVE-2024-8695/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 17:52:55 GMTCVEcriticalCVE-2023-1802: In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedhttps://agentprime.io/advisories/CVE-2023-1802/https://agentprime.io/advisories/CVE-2023-1802/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Apr 2023 08:52:19 GMTCVE