Known vulnerabilities in Docker Desktop

Software CPE: cpe:2.3:a:docker:docker-ce-desktop:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Docker Desktop Docker Desktop is affected by 23 known vulnerabilities: 5 medium, 18 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141444 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-17106
CWE-22 Low
Available
No
4.86.0 11.08.2026 SB2026081136
SB20260828215
SB2026083035
#VU133422 - Uncontrolled Recursion
CVE-2026-8936
CWE-674 Low
No
No
4.76.0 05.06.2026 SB2026060517
#VU132150 - Improper Access Control
CVE-2026-5843
CWE-284 Medium
No
No
4.71.0 22.05.2026 SB2026052284
#VU132149 - Improper Access Control
CVE-2026-5817
CWE-284 Medium
No
No
4.68.0 22.05.2026 SB2026052283
#VU127490 - Exposed Dangerous Method or Function
CVE-2026-6406
CWE-749 Low
No
No
4.59.0 24.04.2026 SB2026042466
#VU124686 - Server-Side Request Forgery (SSRF)
CVE-2026-33990
CWE-918 Medium
No
No
4.67.0 30.03.2026 SB2026033042
#VU123340 - Command injection
CVE-2026-28400
CWE-77 Medium
No
No
4.62.0 27.02.2026 SB2026022424
#VU123167 - Out-of-bounds read
CVE-2026-2664
CWE-125 Low
No
No
4.62.0 24.02.2026 SB2026022424
#VU122424 - Incorrect Permission Assignment for Critical Resource
CVE-2025-14740
CWE-732 Low
No
No
4.57.0 06.02.2026 SB2026020613
#VU119822 - Information Exposure Through Log Files
CVE-2025-13743
CWE-532 Low
No
No
4.54.0 10.12.2025 SB20251210212
#VU117686 - Untrusted Search Path
CVE-2025-9164
CWE-426 Low
No
No
4.49.0 27.10.2025 SB2025102758
#VU116220 - Improper Privilege Management
CVE-2025-10657
CWE-269 Low
No
No
4.47.0 01.10.2025 SB2025100131
#VU114330 - Permissions, Privileges, and Access Controls
CVE-2025-9074
CWE-264 Medium
Available
No
4.44.3 21.08.2025 SB2025082120
#VU113763 - Untrusted Search Path
CVE-2025-23266
CWE-426 Low
Available
No
4.44.0 07.08.2025 SB2025080772
SB2025080773
SB2025081001
and 4 more
#VU113357 - Information Exposure Through Log Files
CVE-2025-6587
CWE-532 Low
No
No
4.43.0 28.07.2025 SB2025072861
#VU109281 - Information Exposure Through Log Files
CVE-2025-3911
CWE-532 Low
No
No
4.41.0 16.05.2025 SB2025051673
#VU109280 - Permissions, Privileges, and Access Controls
CVE-2025-4095
CWE-264 Low
No
No
4.41.0 16.05.2025 SB2025051673
#VU109279 - Permissions, Privileges, and Access Controls
CVE-2025-3224
CWE-264 Low
No
No
4.41.0 16.05.2025 SB2025051673
#VU66169 - Permissions, Privileges, and Access Controls
CVE-2022-23774
CWE-264 Low
No
No
4.5 08.08.2022 SB2022080810
#VU59826 - Exposure of sensitive information to an unauthorized actor
CVE-2021-45449
CWE-200 Low
No
No
4.4.3 19.01.2022 SB2022011921


Showing elements 1 - 20 out of 23