# Docker CVEs > Docker: 58 CVEs mapped to its software or packages (1 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/docker/cves Last updated: 2026-10-13T17:35:20Z 58 CVEs map to Docker (1 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Docker](https://rewindex.com/company/docker.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Docker’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-13 | [CVE-2026-105445](https://rewindex.com/cve/CVE-2026-105445.md) | Docker Hub account conversion could reassign an active personal access token to another user | 9.4 critical | | | 2026-10-09 | [CVE-2026-106581](https://rewindex.com/cve/CVE-2026-106581.md) | Docker Desktop for Windows installer failed to verify external packages | 8.2 high | | | 2026-10-08 | [CVE-2026-105452](https://rewindex.com/cve/CVE-2026-105452.md) | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts | 5.9 medium | | | 2026-10-08 | [CVE-2026-101998](https://rewindex.com/cve/CVE-2026-101998.md) | Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials | 5.9 medium | | | 2026-10-08 | [CVE-2026-105570](https://rewindex.com/cve/CVE-2026-105570.md) | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host | 6.7 medium | | | 2026-10-07 | [CVE-2026-92543](https://rewindex.com/cve/CVE-2026-92543.md) | Docker Engine insecure-registry fallback via malicious DNS responses | 7.6 high | | | 2026-10-07 | [CVE-2026-92542](https://rewindex.com/cve/CVE-2026-92542.md) | Blind VXLAN injection into encrypted overlay networks from cluster peer | 6.9 medium | | | 2026-10-05 | [CVE-2026-93321](https://rewindex.com/cve/CVE-2026-93321.md) | Malformed LLB file operation can crash buildkitd | 6.9 medium | | | 2026-10-05 | [CVE-2026-93315](https://rewindex.com/cve/CVE-2026-93315.md) | BuildKit proxy CA cleanup can be disrupted by build steps | 5.8 medium | | | 2026-10-05 | [CVE-2026-103433](https://rewindex.com/cve/CVE-2026-103433.md) | Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions | 6.9 medium | | | 2026-10-05 | [CVE-2026-93326](https://rewindex.com/cve/CVE-2026-93326.md) | Crafted Git build source can bypass certain policy validation | 6.0 medium | | | 2026-10-05 | [CVE-2026-93323](https://rewindex.com/cve/CVE-2026-93323.md) | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | 6.8 medium | | | 2026-10-05 | [CVE-2026-93322](https://rewindex.com/cve/CVE-2026-93322.md) | Malformed MergeOp can crash the BuildKit daemon | 6.9 medium | | | 2026-10-05 | [CVE-2026-93320](https://rewindex.com/cve/CVE-2026-93320.md) | BuildKit improperly handles special files in build snapshots | 6.0 medium | | | 2026-10-05 | [CVE-2026-93319](https://rewindex.com/cve/CVE-2026-93319.md) | A malicious frontend can cause a daemon panic | 5.7 medium | | | 2026-10-05 | [CVE-2026-93318](https://rewindex.com/cve/CVE-2026-93318.md) | Cache poisoning via unvalidated image layer DiffIDs | 7.5 high | | | 2026-10-05 | [CVE-2026-93317](https://rewindex.com/cve/CVE-2026-93317.md) | Container blob cache can accept unverified content | 5.9 medium | | | 2026-10-05 | [CVE-2026-93316](https://rewindex.com/cve/CVE-2026-93316.md) | Starting daemon with --cdi-disabled flag can lead to panic on specific builds | 7.1 high | | | 2026-09-15 | [CVE-2026-79994](https://rewindex.com/cve/CVE-2026-79994.md) | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race | 8.7 high | | | 2026-09-15 | [CVE-2026-55887](https://rewindex.com/cve/CVE-2026-55887.md) | MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway | 8.7 high | | | 2026-09-15 | [CVE-2026-77179](https://rewindex.com/cve/CVE-2026-77179.md) | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback | 9.4 critical | | | 2026-08-18 | [CVE-2026-17106](https://rewindex.com/cve/CVE-2026-17106.md) | Tar extraction in moby/go-archive can write outside the destination directory via link following | 7.1 high | | | 2026-08-12 | [CVE-2026-18171](https://rewindex.com/cve/CVE-2026-18171.md) | Docker Sandboxes read-only runtime mount writable through its shared-export alias | 5.7 medium | | | 2026-07-21 | [CVE-2026-15793](https://rewindex.com/cve/CVE-2026-15793.md) | Git source checkout from a bundle file could lead to command injection | 7.5 high | | | 2026-07-21 | [CVE-2026-15792](https://rewindex.com/cve/CVE-2026-15792.md) | Possible panic when incorrect parameters sent from frontend | 7.5 high | | | 2026-07-21 | [CVE-2026-15791](https://rewindex.com/cve/CVE-2026-15791.md) | LLB file operation can be tricked to remove /tmp directory contents | 7.5 high | | | 2026-07-21 | [CVE-2026-15789](https://rewindex.com/cve/CVE-2026-15789.md) | Malicious client can bypass destination directory validation on local sources upload | 7.5 high | | | 2026-07-20 | [CVE-2026-15788](https://rewindex.com/cve/CVE-2026-15788.md) | WCOW cache mount source selector resolves NTFS junctions outside of cache root | 7.5 high | | | 2026-06-18 | [CVE-2026-12539](https://rewindex.com/cve/CVE-2026-12539.md) | Docker Sandboxes ICMP egress restriction bypass after daemon restart | 5.1 medium | | | 2026-06-18 | [CVE-2026-12039](https://rewindex.com/cve/CVE-2026-12039.md) | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution | 5.7 medium | | | 2026-06-12 | [CVE-2026-42306](https://rewindex.com/cve/CVE-2026-42306.md) | Moby: Race condition in docker cp allows bind mount redirection to host path | 7.2 high | | | 2026-06-12 | [CVE-2026-41568](https://rewindex.com/cve/CVE-2026-41568.md) | Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap | 6.1 medium | | | 2026-06-05 | [CVE-2026-41567](https://rewindex.com/cve/CVE-2026-41567.md) | Docker: \`PUT /containers/{id}/archive\` executes container binary on the host | 7.2 high | | | 2026-06-02 | [CVE-2026-8936](https://rewindex.com/cve/CVE-2026-8936.md) | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | 8.2 high | | | 2026-05-22 | [CVE-2026-5843](https://rewindex.com/cve/CVE-2026-5843.md) | Docker Model Runner container-to-host code execution via MLX-LM model\_file importlib loading | 8.2 high | | | 2026-05-22 | [CVE-2026-5817](https://rewindex.com/cve/CVE-2026-5817.md) | Docker Model Runner container-to-host code execution via unsandboxed trust\_remote\_code in Python inference backends | 8.2 high | | | 2026-05-22 | [CVE-2026-6406](https://rewindex.com/cve/CVE-2026-6406.md) | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag | 8.8 high | | | 2026-04-01 | [CVE-2026-33990](https://rewindex.com/cve/CVE-2026-33990.md) | Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) | 9.1 critical | | | 2026-03-31 | [CVE-2026-33997](https://rewindex.com/cve/CVE-2026-33997.md) | Moby: Off-by-one error in plugin privilege validation | 6.8 medium | | | 2026-03-31 | [CVE-2026-34040](https://rewindex.com/cve/CVE-2026-34040.md) | Moby: AuthZ plugin bypass with oversized request body | 8.8 high | | | 2026-03-04 | [CVE-2025-15558](https://rewindex.com/cve/CVE-2025-15558.md) | Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability | 7.3 high | | | 2026-02-27 | [CVE-2026-28400](https://rewindex.com/cve/CVE-2026-28400.md) | Docker Model Runner Unauthenticated Runtime Flag Injection via \_configure Endpoint | 7.6 high | | | 2026-02-24 | [CVE-2026-2664](https://rewindex.com/cve/CVE-2026-2664.md) | Out of bounds read vulnerability in grpcfuse kernel module | 7.8 high | | | 2026-02-04 | [CVE-2025-14740](https://rewindex.com/cve/CVE-2025-14740.md) | Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities | 6.7 medium | | | 2025-12-09 | [CVE-2025-13743](https://rewindex.com/cve/CVE-2025-13743.md) | Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs | 7.5 high | | | 2025-12-03 | [CVE-2025-64443](https://rewindex.com/cve/CVE-2025-64443.md) | DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode | 9.6 critical | | | 2025-10-27 | [CVE-2025-62725](https://rewindex.com/cve/CVE-2025-62725.md) | Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations | 8.9 high | | | 2025-10-27 | [CVE-2025-9164](https://rewindex.com/cve/CVE-2025-9164.md) | Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows | 8.8 high | | | 2025-09-26 | [CVE-2025-10657](https://rewindex.com/cve/CVE-2025-10657.md) | Docker Desktop with ECI Fails to Enforce Socket Command Restrictions | 8.7 high | | | 2025-08-20 | [CVE-2025-9074](https://rewindex.com/cve/CVE-2025-9074.md) | Docker Desktop allows unauthenticated access to Docker Engine API from containers | 9.3 critical | | Next page: [page 2](https://rewindex.com/company/docker/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Docker) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-10 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-01 | 1 | 0 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 1 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-23 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 1 | 1 | 1 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-20 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-18 | 0 | 3 | 0 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-06-08 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-06-15 | 0 | 0 | 2 | 0 | 0 | 0 | | 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-20 | 0 | 5 | 0 | 0 | 0 | 0 | | 2026-07-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-10 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-08-17 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-14 | 1 | 2 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-05 | 0 | 4 | 13 | 0 | 0 | 0 | | 2026-10-12 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-10-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/docker/cves · Markdown: https://rewindex.com/company/docker/cves.md · JSON: https://rewindex.com/api/v1/companies/docker/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:00:34.412Z