Docker vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Docker flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2019-15752 Docker Desktop Community Edition Privilege EscalationExploited since Nov 3, 2021 · CVSS 7.8

Latest high and critical flaws

• CVE-2026-105445 An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a persoCritical 9.4 · Oct 13, 2026
• CVE-2026-106581 Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package.High 7.3 · Oct 9, 2026
• CVE-2026-92543 Docker Engine classifies a registry hostname as insecure using an any-match DNS check.High 7.6 · Oct 7, 2026
• CVE-2026-79994 The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the paHigh 8.7 · Sep 15, 2026
• CVE-2026-55887 MCP Gateway allows easy and secure running and deployment of MCP servers.High 8.7 · Sep 15, 2026
• CVE-2026-77179 On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path.Critical 9.4 · Sep 15, 2026
• CVE-2026-8936 Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder anHigh 8.2 · Jun 2, 2026
• CVE-2026-5843 The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model High 8.8 · May 22, 2026
• CVE-2026-5817 The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sanHigh 8.8 · May 22, 2026
• CVE-2026-6406 The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.High 8.8 · May 22, 2026
• CVE-2025-15558 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default.High 7 · Mar 4, 2026
• CVE-2026-28400 Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.High 7.5 · Feb 27, 2026
• CVE-2025-64443 MCP Gateway allows easy and secure running and deployment of MCP servers.High 7.3 · Dec 3, 2025
• CVE-2025-62725 Docker Compose trusts the path information embedded in remote OCI compose artifacts.High 8.9 · Oct 27, 2025
• CVE-2025-9164 Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order.High 8.8 · Oct 27, 2025
• CVE-2025-10657 In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterprise/security/hardened-desktop/enhanced-container-isolatHigh 8.7 · Sep 26, 2025
• CVE-2025-9074 A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, atCritical 9.3 · Aug 20, 2025
• CVE-2025-3224 A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privilegesHigh 7.3 · Apr 28, 2025
• CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.High 8.9 · Oct 16, 2024
• CVE-2024-8696 A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop beforHigh 8.9 · Sep 12, 2024
• CVE-2024-8695 A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2Critical 9 · Sep 12, 2024
• CVE-2024-6222 In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passHigh 7.3 · Jul 9, 2024
• CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.High 8 · Sep 25, 2023
• CVE-2023-5165 Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible High 7.1 · Sep 25, 2023
• CVE-2023-0633 In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: High 7.2 · Sep 25, 2023