{"items":[{"id":"CVE-2026-121541","published":"2026-11-03T22:01:09.960Z","updated":"2026-11-06T19:32:25.684Z","title":"Bake filesystem path entitlements approval can be skipped in some multi-target builds","severity":"MEDIUM","score":5.6,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-121542","published":"2026-11-03T21:59:06.193Z","updated":"2026-11-04T18:20:22.776Z","title":"Bake filesystem path entitlements approval can be skipped for path using basename prefix","severity":"LOW","score":1.8,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2026-121614","published":"2026-11-03T21:54:58.464Z","updated":"2026-11-06T19:33:59.772Z","title":"Docker Sandboxes host Git executes repository-controlled programs","severity":"HIGH","score":7.1,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-93325","published":"2026-11-03T19:35:47.154Z","updated":"2026-11-06T19:52:50.162Z","title":"Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx","severity":"HIGH","score":7.3,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2026-112917","published":"2026-11-03T19:08:11.422Z","updated":"2026-11-04T13:33:36.124Z","title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall","severity":"CRITICAL","score":9.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-103916","published":"2026-11-03T16:19:03.726Z","updated":"2026-11-03T17:43:23.309Z","title":"Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory","severity":"HIGH","score":8.4,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-114409","published":"2026-10-27T12:25:57.894Z","updated":"2026-11-04T20:28:50.246Z","title":"Docker Desktop logs can expose stored third-party credentials","severity":"MEDIUM","score":5.7,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-105445","published":"2026-10-13T17:35:20.071Z","updated":"2026-10-19T13:00:13.891Z","title":"Docker Hub account conversion could reassign an active personal access token to another user","severity":"CRITICAL","score":9.4,"vendor":"Docker","product":"Docker Hub","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2026-106581","published":"2026-10-09T13:40:18.724Z","updated":"2026-10-09T16:46:27.791Z","title":"Docker Desktop for Windows installer failed to verify external packages","severity":"HIGH","score":8.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-105452","published":"2026-10-08T18:49:37.331Z","updated":"2026-10-08T19:29:41.004Z","title":"Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts","severity":"MEDIUM","score":5.9,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-101998","published":"2026-10-08T18:47:28.551Z","updated":"2026-10-08T19:27:49.633Z","title":"Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials","severity":"MEDIUM","score":5.9,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2026-105570","published":"2026-10-08T18:46:05.122Z","updated":"2026-10-08T19:28:28.605Z","title":"Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host","severity":"MEDIUM","score":6.7,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-92543","published":"2026-10-07T16:44:21.237Z","updated":"2026-10-07T20:31:28.770Z","title":"Docker Engine insecure-registry fallback via malicious DNS responses","severity":"HIGH","score":7.6,"vendor":"Docker","product":"Docker Engine","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-92542","published":"2026-10-07T16:42:20.998Z","updated":"2026-10-07T20:30:49.884Z","title":"Blind VXLAN injection into encrypted overlay networks from cluster peer","severity":"MEDIUM","score":6.9,"vendor":"Docker","product":"Docker Engine","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-103433","published":"2026-10-05T21:54:44.822Z","updated":"2026-10-06T13:36:00.334Z","title":"Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions","severity":"MEDIUM","score":6.9,"vendor":"Docker","product":"Docker Buildx","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-79994","published":"2026-09-15T20:33:21.074Z","updated":"2026-09-16T17:57:02.176Z","title":"Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race","severity":"HIGH","score":8.7,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2026-55887","published":"2026-09-15T15:45:36.420Z","updated":"2026-09-15T18:02:09.186Z","title":"MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway","severity":"HIGH","score":8.7,"vendor":"docker","product":"mcp-gateway","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-77179","published":"2026-09-15T13:32:41.132Z","updated":"2026-09-15T21:43:07.049Z","title":"Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback","severity":"CRITICAL","score":9.4,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-17106","published":"2026-08-18T18:35:13.465Z","updated":"2026-08-19T03:56:16.526Z","title":"Tar extraction in moby/go-archive can write outside the destination directory via link following","severity":"HIGH","score":7.1,"vendor":"moby","product":"go-archive","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2026-18171","published":"2026-08-12T14:47:24.572Z","updated":"2026-08-12T17:02:13.455Z","title":"Docker Sandboxes read-only runtime mount writable through its shared-export alias","severity":"MEDIUM","score":5.7,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-12539","published":"2026-06-18T13:51:13.588Z","updated":"2026-08-13T13:33:36.104Z","title":"Docker Sandboxes ICMP egress restriction bypass after daemon restart","severity":"MEDIUM","score":5.1,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-12039","published":"2026-06-18T13:48:14.682Z","updated":"2026-08-13T13:33:35.581Z","title":"Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution","severity":"MEDIUM","score":5.7,"vendor":"Docker","product":"Docker Sandboxes","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-41567","published":"2026-06-05T00:35:50.563Z","updated":"2026-09-09T12:04:44.418Z","title":"Docker: `PUT /containers/{id}/archive` executes container binary on the host","severity":"HIGH","score":7.2,"vendor":"moby","product":"moby/v2/daemon","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-8936","published":"2026-06-02T21:09:03.375Z","updated":"2026-06-03T14:08:05.541Z","title":"Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM","severity":"HIGH","score":8.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2026-5843","published":"2026-05-22T19:28:38.857Z","updated":"2026-05-27T03:55:38.188Z","title":"Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading","severity":"HIGH","score":8.8,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-5817","published":"2026-05-22T19:24:15.662Z","updated":"2026-05-27T03:55:37.087Z","title":"Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends","severity":"HIGH","score":8.8,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-6406","published":"2026-05-22T18:32:15.959Z","updated":"2026-05-23T03:56:00.655Z","title":"Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag","severity":"HIGH","score":8.8,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-33990","published":"2026-04-01T16:17:40.719Z","updated":"2026-04-04T03:02:31.956Z","title":"Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)","severity":"MEDIUM","score":6.8,"vendor":"docker","product":"model-runner","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2025-15558","published":"2026-03-04T16:14:32.045Z","updated":"2026-07-15T01:26:49.243Z","title":"Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","severity":"HIGH","score":7,"vendor":"Docker","product":"Docker CLI","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-28400","published":"2026-02-27T21:06:12.418Z","updated":"2026-03-03T20:30:39.966Z","title":"Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint","severity":"HIGH","score":7.6,"vendor":"docker","product":"model-runner","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-2664","published":"2026-02-24T10:09:18.664Z","updated":"2026-02-26T08:34:00.870Z","title":"Out of bounds read vulnerability in grpcfuse kernel module","severity":"MEDIUM","score":6.8,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-13743","published":"2025-12-09T20:39:52.071Z","updated":"2025-12-10T15:45:17.295Z","title":"Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs","severity":"LOW","score":2.4,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2025-64443","published":"2025-12-03T17:41:59.272Z","updated":"2025-12-03T18:14:24.648Z","title":"DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode","severity":"HIGH","score":7.3,"vendor":"docker","product":"mcp-gateway","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2025-62725","published":"2025-10-27T20:37:32.340Z","updated":"2025-10-28T14:47:42.196Z","title":"Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations","severity":"HIGH","score":8.9,"vendor":"docker","product":"compose","kev":false,"epss":0.15764,"kevAdded":null},{"id":"CVE-2025-9164","published":"2025-10-27T13:53:40.216Z","updated":"2026-02-26T16:57:05.419Z","title":"Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows","severity":"HIGH","score":8.8,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2025-10657","published":"2025-09-26T21:05:19.043Z","updated":"2026-02-26T17:47:53.364Z","title":"Docker Desktop with ECI Fails to Enforce Socket Command Restrictions","severity":"HIGH","score":8.7,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2025-9074","published":"2025-08-20T13:28:35.553Z","updated":"2026-02-26T17:48:24.266Z","title":"Docker Desktop allows unauthenticated access to Docker Engine API from containers","severity":"CRITICAL","score":9.3,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.01897,"kevAdded":null},{"id":"CVE-2025-6587","published":"2025-07-03T10:03:27.155Z","updated":"2026-02-26T18:27:56.445Z","title":"Exposure of system environment variables in Docker Desktop diagnostic logs","severity":"MEDIUM","score":5.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2025-3911","published":"2025-04-29T17:20:34.740Z","updated":"2025-04-29T17:58:50.628Z","title":"Exposure in Docker Desktop logs of environment variables configured for running containers","severity":"MEDIUM","score":5.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2025-4095","published":"2025-04-29T17:16:16.894Z","updated":"2025-04-29T18:00:02.591Z","title":"Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile","severity":"MEDIUM","score":4.3,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2025-3224","published":"2025-04-28T19:21:15.851Z","updated":"2025-04-28T19:43:24.060Z","title":"Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion","severity":"HIGH","score":7.3,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2025-0495","published":"2025-03-17T19:21:11.295Z","updated":"2025-03-18T16:25:42.668Z","title":"Secrets leakage to telemetry endpoint via cache backend configuration via buildx","severity":"MEDIUM","score":4.1,"vendor":"docker","product":"buildx","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2025-1696","published":"2025-03-06T11:58:43.389Z","updated":"2025-03-06T16:15:52.078Z","title":"Exposure of Proxy Credentials in Docker Desktop Logs","severity":"MEDIUM","score":5.2,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2024-9348","published":"2024-10-16T14:50:06.031Z","updated":"2024-10-17T13:30:08.548Z","title":"Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view","severity":"HIGH","score":8.9,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2024-8696","published":"2024-09-12T17:54:34.968Z","updated":"2024-09-12T19:27:18.773Z","title":"A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.","severity":"HIGH","score":8.9,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.01225,"kevAdded":null},{"id":"CVE-2024-8695","published":"2024-09-12T17:52:55.491Z","updated":"2024-09-12T19:14:03.622Z","title":"A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.","severity":"CRITICAL","score":9,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.01251,"kevAdded":null},{"id":"CVE-2023-1802","published":"2023-04-06T08:52:19.506Z","updated":"2025-02-10T20:22:38.457Z","title":"In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed","severity":"MEDIUM","score":5.9,"vendor":"Docker","product":"Docker Desktop","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2021-41092","published":"2021-10-04T20:10:10.000Z","updated":"2024-08-04T02:59:31.334Z","title":"Docker CLI leaks private registry credentials to registry-1.docker.io","severity":"MEDIUM","score":5.4,"vendor":"docker","product":"cli","kev":false,"epss":0.01652,"kevAdded":null},{"id":"CVE-2014-8179","published":"2019-12-04T15:10:35.000Z","updated":"2024-08-06T13:10:51.252Z","title":"Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during…","severity":"HIGH","score":7.5,"vendor":"Docker","product":"Docker Engine","kev":false,"epss":0.02733,"kevAdded":null},{"id":"CVE-2014-8178","published":"2019-12-04T15:05:02.000Z","updated":"2024-08-06T13:10:51.117Z","title":"Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for…","severity":"MEDIUM","score":5.5,"vendor":"Docker","product":"Docker Engine","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2019-1020014","published":"2019-07-29T12:20:21.000Z","updated":"2024-08-05T03:14:16.187Z","title":"docker-credential-helpers before 0.6.3 has a double free in the List functions.","severity":"MEDIUM","score":5.5,"vendor":"Docker","product":"docker-credential-helpers","kev":false,"epss":0.00406,"kevAdded":null}]}