What’s Vulnerable › Products
Docker Inc. Docker Desktop vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Docker Inc. Docker Desktop version is affected
Latest Docker Inc. Docker Desktop vulnerabilities
- CVE-2026-5843 — Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading (CVSS 8.6)
- CVE-2026-5817 — Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends (CVSS 8.6)
- CVE-2026-6406 — Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag (CVSS 8.8)
- CVE-2025-14740 — Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities (CVSS 6.7)
- CVE-2025-13743 — Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs (CVSS 7.5)
- CVE-2023-5166 — Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL (CVSS 6.5)
- CVE-2023-5165 — Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell (CVSS 8.8)
- CVE-2023-0633 — In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE (CVSS 7.8)
- CVE-2023-0627 — Docker Desktop 4.11.x allows --no-windows-containers flag bypass (CVSS 7.8)
- CVE-2023-0626 — Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route (CVSS 9.8)
- CVE-2023-0625 — Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog (CVSS 9.8)
- CVE-2023-0629 — Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers (CVSS 7.1)
- CVE-2023-0628 — Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL (CVSS 7.8)
- CVE-2021-44719 — (CVSS 8.4)
- CVE-2022-26659 — (CVSS 7.1)
- CVE-2022-23774 — (CVSS 5.3)
- CVE-2021-45449 — (CVSS 5.5)
- CVE-2020-15360 — (CVSS 7.8)
- CVE-2020-11492 — (CVSS 7.8)