# CVE-2026-2664: Out of bounds read vulnerability in grpcfuse kernel module

> CVE-2026-2664: Out of bounds read vulnerability in grpcfuse kernel module. CVSS 7.8 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-2664
Last updated: 2026-06-17T10:31:29Z

- Published: 2026-02-24 10:09 UTC · Updated: 2026-06-17 10:31 UTC · Assigner: Docker
- CVSS: 7.8 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS: 0.21%, 11th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-125

## Description

An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .

## Affected vendors and products

- Docker: Docker Desktop

## Tracked companies

- [Docker](https://rewindex.com/company/docker.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-2664)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-2664)
- [https://docs.docker.com/desktop/release-notes/\#4620](https://docs.docker.com/desktop/release-notes/#4620)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-2664 · Markdown: https://rewindex.com/cve/CVE-2026-2664.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-2664 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T04:04:06.670Z