Docker

Records133All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high66CVSS 7.0–8.9

Exploited now

Docker records in CISA KEV

TI-2019-11833 Docker Desktop Community Edition Privilege Escalation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Docker 37 records CRITICAL Docker Desktop 18 records MEDIUM Desktop 13 records HIGH Engine 6 records MEDIUM Command Line Interface 2 records LOW Cs Engine 2 records LOW Libcontainer 2 records LOW Notary 2 records MEDIUM

Records

18 records in Docker Desktop · all components

TI-2023-00593 CVE-2023-0626 · GHSA-c2x5-vqm4-5hj4

Code injection in Docker Desktop

MEDIUM 44

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0087 Published 2023-09-25 Fixed in 4.12.0 CWE-94

TI-2023-00592 CVE-2023-0625 · GHSA-xrpp-3rf6-w42j

Cross-site scripting in Docker Desktop

MEDIUM 44

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0087 Published 2023-09-25 Fixed in 4.12.0 CWE-79

TI-2023-04753 CVE-2023-5165 · GHSA-rc4h-xgcc-x9w4

Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell

MEDIUM 40

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00327 Published 2023-09-25 Fixed in 4.23.0 CWE-424

TI-2026-05623 CVE-2026-6406 · GHSA-3f9v-226v-2qc9

Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

LOW 39

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00211 Published 2026-05-22 Fixed in 4.59.0 CWE-863

TI-2026-05122 CVE-2026-5843 · GHSA-9m9w-53g9-47c4

Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

LOW 39

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config…

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00224 Published 2026-05-22 Fixed in 4.71.0 CWE-829

TI-2026-05098 CVE-2026-5817 · GHSA-cgqp-ww2v-6rjh

Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

LOW 39

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00224 Published 2026-05-22 Fixed in 4.68.0 CWE-829

TI-2023-04754 CVE-2023-5166 · GHSA-37gr-7cxx-ccpq

Information disclosure in Docker Desktop

LOW 38

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00794 Published 2023-09-25 Fixed in 4.23.0 CWE-200

TI-2023-00600 CVE-2023-0633 · GHSA-rgjx-xmjq-vjfg

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

LOW 36

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0039 Published 2023-09-25 Fixed in 4.12.0 CWE-88

TI-2023-00594 CVE-2023-0627 · GHSA-7v95-w7c6-3w2g

Docker Desktop 4.11.x allows --no-windows-containers flag bypass

LOW 36

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2023-09-25 No fix listed CWE-501

TI-2021-20240 CVE-2021-44719 · GHSA-gc72-8hpq-4vjw

Docker Desktop 4.3.0 has Incorrect Access Control.

LOW 36

Docker Desktop 4.3.0 has Incorrect Access Control.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00273 Published 2022-05-25 No fix listed

TI-2020-09217 CVE-2020-11492 · GHSA-3qmr-hmpr-mv37

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows.

LOW 36

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01019 Published 2020-06-05 No fix listed CWE-362

TI-2020-12108 CVE-2020-15360 · GHSA-wg4x-5mmv-p8gp

com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.

LOW 35

com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00681 Published 2020-06-27 No fix listed CWE-862

TI-2023-00595 CVE-2023-0628 · GHSA-pf8f-jj2r-7pj2

Command injection in Docker Desktop

LOW 34

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00265 Published 2023-03-13 Fixed in 4.17.0 CWE-77

TI-2023-00596 CVE-2023-0629 · GHSA-623v-x3rr-q8qh

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container…

LOW 33

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00218 Published 2023-03-13 Fixed in 4.17.0 CWE-424

TI-2022-09932 CVE-2022-26659 · GHSA-grp6-p35v-pgfx

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to…

LOW 32

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00432 Published 2022-03-25 No fix listed CWE-59

TI-2022-07810 CVE-2022-23774 · GHSA-p8jh-46vw-8xq5

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.

LOW 26

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00926 Published 2022-02-01 No fix listed

TI-2021-20538 CVE-2021-45449 · GHSA-55mj-xmgr-6v5w

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information…

LOW 25

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00419 Published 2022-01-12 No fix listed CWE-532

TI-2025-12563 CVE-2025-13743 · GHSA-5j4f-jq8r-vg77

Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs

LOW 12

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00215 Published 2025-12-09 Fixed in 4.54.0 CWE-532

Open these records in search →