en
Docker is a software company focused on container-based application development and delivery. It provides developer and enterprise tooling for packaging, building, sharing, running, and securing applications, and supports AI-native development workflows for a global developer community.
As of 09/14/2026, Docker recorded 4 security vulnerabilities in the last 90 days across 5 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Docker Sandboxes had the most security vulnerabilities in the Docker ecosystem, with 4 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following | Exploitation statusPublic exploit | FixYes | Affected productDocker Sandboxes | Published08/18/2026 | SeverityHigh |
CVE-2026-18171Docker Sandboxes read-only runtime mount writable through its shared-export alias | Exploitation statusNot known exploited | FixYes | Affected productDocker Sandboxes | Published08/12/2026 | SeverityMedium |
CVE-2026-12539Docker Sandboxes ICMP egress restriction bypass after daemon restart | Exploitation statusNot known exploited | FixYes | Affected productDocker Sandboxes | Published06/18/2026 | SeverityMedium |
CVE-2026-12039Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution | Exploitation statusNot known exploited | FixYes | Affected productDocker Sandboxes | Published06/18/2026 | SeverityMedium |
CVE-2026-42306Moby: Race condition in docker cp allows bind mount redirection to host path | Exploitation statusNot known exploited | FixYes | Affected productmoby | Published06/12/2026 | SeverityHigh |
CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap | Exploitation statusNot known exploited | FixYes | Affected productmoby | Published06/12/2026 | SeverityMedium |
CVE-2026-41567Docker: `PUT /containers/{id}/archive` executes container binary on the host | Exploitation statusNot known exploited | FixYes | Affected productdocker/daemon | Published06/05/2026 | SeverityHigh |
CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published06/02/2026 | SeverityHigh |
CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published05/22/2026 | SeverityHigh |
CVE-2026-5817Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published05/22/2026 | SeverityHigh |
CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published05/22/2026 | SeverityHigh |
CVE-2026-33990Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) | Exploitation statusNot known exploited | FixYes | Affected productmodel-runner | Published04/01/2026 | SeverityMedium |
CVE-2026-33997Moby: Off-by-one error in plugin privilege validation | Exploitation statusNot known exploited | FixYes | Affected productmoby | Published03/31/2026 | SeverityHigh |
CVE-2026-34040Moby: AuthZ plugin bypass with oversized request body | Exploitation statusNot known exploited | FixYes | Affected productmoby | Published03/31/2026 | SeverityHigh |
CVE-2025-15558Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productDocker CLI | Published03/04/2026 | SeverityHigh |
CVE-2026-28400Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint | Exploitation statusNot known exploited | FixYes | Affected productmodel-runner | Published02/27/2026 | SeverityHigh |
CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel module | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published02/24/2026 | SeverityMedium |
CVE-2025-13743Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published12/09/2025 | SeverityLow |
CVE-2025-64443DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode | Exploitation statusNot known exploited | FixNot confirmed | Affected productmcp-gateway | Published12/03/2025 | SeverityHigh |
CVE-2025-62725Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations | Exploitation statusNot known exploited | FixYes | Affected productcompose | Published10/27/2025 | SeverityHigh |
CVE-2025-9164Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published10/27/2025 | SeverityHigh |
CVE-2025-10657Docker Desktop with ECI Fails to Enforce Socket Command Restrictions | Exploitation statusNot known exploited | FixNot confirmed | Affected productDocker Desktop | Published09/26/2025 | SeverityHigh |
CVE-2025-9074Docker Desktop allows unauthenticated access to Docker Engine API from containers | Exploitation statusPublic exploit | FixYes | Affected productDocker Desktop | Published08/20/2025 | SeverityCritical |
CVE-2025-6587Exposure of system environment variables in Docker Desktop diagnostic logs | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published07/03/2025 | SeverityMedium |
CVE-2025-3911Exposure in Docker Desktop logs of environment variables configured for running containers | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published04/29/2025 | SeverityMedium |
CVE-2025-4095Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published04/29/2025 | SeverityMedium |
CVE-2025-3224Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion | Exploitation statusPublic exploit | FixYes | Affected productDocker Desktop | Published04/28/2025 | SeverityHigh |
CVE-2025-0495Secrets leakage to telemetry endpoint via cache backend configuration via buildx | Exploitation statusNot known exploited | FixYes | Affected productbuildx | Published03/17/2025 | SeverityMedium |
CVE-2025-1696Exposure of Proxy Credentials in Docker Desktop Logs | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published03/06/2025 | SeverityMedium |
CVE-2024-9348Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published10/16/2024 | SeverityHigh |
CVE-2024-8696A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/12/2024 | SeverityHigh |
CVE-2024-8695A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/12/2024 | SeverityCritical |
CVE-2024-6222In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published07/09/2024 | SeverityHigh |
CVE-2024-5652In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published07/09/2024 | SeverityMedium |
CVE-2023-0633In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityHigh |
CVE-2023-0627Docker Desktop 4.11.x allows --no-windows-containers flag bypass | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityMedium |
CVE-2023-0626Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityHigh |
CVE-2023-0625Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityHigh |
CVE-2023-5166Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityHigh |
CVE-2023-5165Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published09/25/2023 | SeverityHigh |
CVE-2023-40453 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published08/14/2023 | SeverityUnknown |
CVE-2022-34292 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/27/2023 | SeverityHigh |
CVE-2022-38730 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/27/2023 | SeverityMedium |
CVE-2022-37326 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/27/2023 | SeverityHigh |
CVE-2022-31647 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/27/2023 | SeverityHigh |
CVE-2023-1802In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published04/06/2023 | SeverityMedium |
CVE-2023-0629Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published03/13/2023 | SeverityHigh |
CVE-2023-0628Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL | Exploitation statusNot known exploited | FixYes | Affected productDocker Desktop | Published03/13/2023 | SeverityMedium |
CVE-2021-44719 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/25/2022 | SeverityUnknown |
CVE-2022-26659 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/25/2022 | SeverityUnknown |
CVE-2022-25365 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/19/2022 | SeverityHigh |
CVE-2022-23774 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-45449 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/12/2022 | SeverityUnknown |
CVE-2021-41092Docker CLI leaks private registry credentials to registry-1.docker.io | Exploitation statusNot confirmed | FixYes | Affected productcli | Published10/04/2021 | SeverityMedium |
CVE-2021-37841 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/12/2021 | SeverityUnknown |
CVE-2021-21284privilege escalation in Moby | Exploitation statusNot confirmed | FixNot confirmed | Affected productmoby | Published02/02/2021 | SeverityMedium |
CVE-2021-21285Docker daemon crash during image pull of malicious image | Exploitation statusNot confirmed | FixNot confirmed | Affected productmoby | Published02/02/2021 | SeverityMedium |
CVE-2021-3162 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/15/2021 | SeverityUnknown |
CVE-2020-27534 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/30/2020 | SeverityUnknown |
CVE-2020-35184 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35196 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35186 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35195 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35197 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35185 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2020 | SeverityUnknown |
CVE-2020-35467 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/15/2020 | SeverityUnknown |
CVE-2020-29591 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/11/2020 | SeverityUnknown |
CVE-2020-29575 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2020 | SeverityUnknown |
CVE-2020-29580 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2020 | SeverityUnknown |
CVE-2020-29601 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2020 | SeverityUnknown |
CVE-2020-29581 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2020 | SeverityUnknown |
CVE-2020-29389 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/02/2020 | SeverityUnknown |
CVE-2020-14300 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDocker | Published07/13/2020 | SeverityUnknown |
CVE-2020-14298 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDocker | Published07/13/2020 | SeverityUnknown |
CVE-2020-15360 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/27/2020 | SeverityUnknown |
CVE-2020-11492 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/05/2020 | SeverityUnknown |
CVE-2020-13401 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/02/2020 | SeverityUnknown |
CVE-2020-10665 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/18/2020 | SeverityUnknown |
CVE-2014-5278 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/07/2020 | SeverityUnknown |
CVE-2014-0048 | Exploitation statusNot confirmed | FixNot confirmed | Affected productdocker.io | Published01/02/2020 | SeverityUnknown |
CVE-2014-8179 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDocker Engine | Published12/04/2019 | SeverityUnknown |
CVE-2014-8178 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDocker Engine | Published12/04/2019 | SeverityUnknown |
CVE-2014-9356 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/02/2019 | SeverityUnknown |
CVE-2019-16884 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/25/2019 | SeverityUnknown |
CVE-2019-15752 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published08/28/2019 | SeverityHigh |
CVE-2019-13139 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/22/2019 | SeverityUnknown |
CVE-2019-14271 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/29/2019 | SeverityUnknown |
CVE-2019-1020014 | Exploitation statusNot confirmed | FixNot confirmed | Affected productdocker-credential-helpers | Published07/29/2019 | SeverityUnknown |
CVE-2019-13509 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/18/2019 | SeverityUnknown |
CVE-2018-15664 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/23/2019 | SeverityUnknown |
CVE-2019-5736 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/11/2019 | SeverityUnknown |
CVE-2018-20699 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/12/2019 | SeverityUnknown |
CVE-2018-15514 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/01/2018 | SeverityUnknown |
CVE-2018-10892 | Exploitation statusNot confirmed | FixNot confirmed | Affected productdocker | Published07/06/2018 | SeverityMedium |
CVE-2015-9258 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/31/2018 | SeverityUnknown |
CVE-2015-9259 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/31/2018 | SeverityUnknown |
CVE-2014-5282 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/06/2018 | SeverityUnknown |
CVE-2017-14992 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/01/2017 | SeverityUnknown |
CVE-2014-0047 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/06/2017 | SeverityUnknown |
CVE-2017-11468 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/20/2017 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
