Latest vulnerabilities for vendor "docker"

Where

Sort:

Software

docker

docker docker

docker desktop

docker docker desktop

docker engine

docker docker desktop for windows

docker buildkit

docker command line interface

docker cs engine

docker desktop windows

docker docker cli

docker docker engine

docker docker mcp plugin

docker docker model runner

docker credential helpers

docker desktop community edition

docker desktop linux

docker desktop macos

docker distribution

docker docker desktop for macos

docker docker desktop for macos inference server

docker docker model runner (vllm-metal inference backend)

docker docker sandboxes (sbx)

docker docker-py

docker elixir alpine docker image

docker ghost alpine docker image

docker haproxy

docker hub

docker libcontainer

docker libcontainer docker

docker mcp gateway

docker model runner docker

docker notary

docker spiped alpine docker image

docker storm docker image

Docker Docker Desktop for macOS Inference ServerDocker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

Risk 52

First published (updated )

Advisory

ZDI-26-451

Docker Docker Desktop for macOSZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

Risk 52

First published (updated )

ZDI-CAN-29308

Docker BuildKitGit source checkout from a bundle file could lead to command injection

Risk 69

Severity

7.3

First published (updated )

CVE-2026-15793

Docker BuildKitLLB file operation can be tricked to remove /tmp directory contents

Risk 20

Severity

1.8

First published (updated )

CVE-2026-15791

Docker BuildKitWCOW cache mount source selector resolves NTFS junctions outside of cache root

Risk 32

Severity

5.6

First published (updated )

CVE-2026-15788

Docker Docker MCP PluginZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

Risk 77

First published (updated )

ZDI-CAN-29539

Docker Docker MCP PluginDocker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

Risk 77

First published (updated )

Advisory

ZDI-26-363

Docker Docker EngineDocker Sandboxes ICMP egress restriction bypass after daemon restart

Risk 32

Severity

5.7

First published (updated )

CVE-2026-12539

Docker Docker Sandboxes (sbx)Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution

Risk 32

Severity

5.7

First published (updated )

CVE-2026-12039

Docker Docker EngineMoby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2485356

Docker Docker DesktopZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

Risk 27

First published (updated )

ZDI-CAN-30796

Docker Docker DesktopDocker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

Risk 27

First published (updated )

Advisory

ZDI-26-327

Docker Docker DesktopUnbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Risk 30

Severity

8.2

EPSS

0.11%

First published (updated )

CVE-2026-8936

Docker Docker Model RunnerDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

Risk 71

Severity

8.8

First published (updated )

CVE-2026-5843

Docker Docker Model Runner (vllm-metal inference backend)Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

Risk 71

Severity

8.8

First published (updated )

CVE-2026-5817

Mobyproject Moby\/v2Moby: Race condition in docker cp allows bind mount redirection to host path

Risk 49

Severity

7.2

First published (updated )

CVE-2026-42306

Mobyproject Moby\/v2Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Risk 39

Severity

6.1

First published (updated )

CVE-2026-41568

Docker Docker DesktopZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Risk 42

Severity

8.8

First published (updated )

ZDI-CAN-28822

Docker Docker DesktopDocker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Risk 42

Severity

8.8

First published (updated )

Advisory

ZDI-26-299

Docker Docker DesktopDocker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Risk 72

Severity

8.8

First published (updated )

CVE-2026-6406

Docker Docker Desktop for WindowsZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Risk 44

First published (updated )

ZDI-CAN-27430

Docker Docker Desktop for Windows(0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Risk 44

First published (updated )

Advisory

ZDI-26-259

Docker Docker Desktop(0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Risk 41

First published (updated )

Advisory

ZDI-26-261

Docker Docker DesktopZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Risk 41

First published (updated )

ZDI-CAN-27431

Docker Docker Desktop for WindowsZDI-26-258: (0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Risk 47

First published (updated )

ZDI-CAN-27229

Docker Docker Desktop(0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

Risk 44

First published (updated )

Advisory

ZDI-26-260

Docker Docker DesktopZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

Risk 41

First published (updated )

ZDI-CAN-27571

Docker Docker Desktop for Windows(0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Risk 47

First published (updated )

Advisory

ZDI-26-258

Docker DistributionDistribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distr…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2455571

go/github.com/docker/model-runnerDocker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)

Risk 66

Severity

6.8

First published (updated )

CVE-2026-33990

Trending

Vendor Risk Score

Software

Docker Docker Desktop for macOS Inference ServerDocker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

Docker Docker Desktop for macOSZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

Docker BuildKitGit source checkout from a bundle file could lead to command injection

Docker BuildKitLLB file operation can be tricked to remove /tmp directory contents

Docker BuildKitWCOW cache mount source selector resolves NTFS junctions outside of cache root

Don't miss critical vulnerabilities

Docker Docker MCP PluginZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

Docker Docker MCP PluginDocker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

Docker Docker EngineDocker Sandboxes ICMP egress restriction bypass after daemon restart

Docker Docker Sandboxes (sbx)Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution

Docker Docker EngineMoby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to…

Don't miss critical vulnerabilities

Docker Docker DesktopZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

Docker Docker DesktopDocker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

Docker Docker DesktopUnbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Docker Docker Model RunnerDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

Docker Docker Model Runner (vllm-metal inference backend)Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

Don't miss critical vulnerabilities

Mobyproject Moby\/v2Moby: Race condition in docker cp allows bind mount redirection to host path

Mobyproject Moby\/v2Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Docker Docker DesktopZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Docker Docker DesktopDocker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Docker Docker DesktopDocker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

Don't miss critical vulnerabilities

Docker Docker Desktop for WindowsZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Docker Docker Desktop for Windows(0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Docker Docker Desktop(0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Docker Docker DesktopZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Docker Docker Desktop for WindowsZDI-26-258: (0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Don't miss critical vulnerabilities

Docker Docker Desktop(0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

Docker Docker DesktopZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

Docker Docker Desktop for Windows(0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Docker DistributionDistribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distr…

go/github.com/docker/model-runnerDocker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)

Don't miss critical vulnerabilities

Company

Resources

Contact