CVE Tools
Track your stack

Docker

86 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Docker, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Docker CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Docker CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-031
2025-043
2025-050
2025-060
2025-071
2025-081
2025-091
2025-101
2025-110
2025-121
2026-010
2026-022
2026-030
2026-040
2026-053
2026-061
2026-070
2026-081
2026-090
2026-104
2026-111

Severity

How the 86 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical79%
  • High4256%
  • Medium2432%
  • Low23%

Latest CVEs

The 15 most recently published vulnerabilities affecting Docker.

  1. CVE-2026-112917Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall—
  2. CVE-2026-114409Docker Desktop logs can expose stored third-party credentials—
  3. CVE-2026-106581Docker Desktop for Windows installer failed to verify external packages—
  4. CVE-2026-92543Docker Engine insecure-registry fallback via malicious DNS responses—
  5. CVE-2026-92542Blind VXLAN injection into encrypted overlay networks from cluster peer—
  6. CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following—
  7. CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM—
  8. CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading8.2
  9. CVE-2026-5817Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends8.2
  10. CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag8.8
  11. CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel module7.8
  12. CVE-2025-14740Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities6.7
  13. CVE-2025-13743Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs7.5
  14. CVE-2025-9164Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows7.8
  15. CVE-2025-10657Docker Desktop with ECI Fails to Enforce Socket Command Restrictions—

Product grouping is registry-driven, with AI assist and human review. How it works