Docker CVE feed and alerts
Every new CVE and security advisory affecting Docker, merged from the CVE List, GitHub, OSV, NVD and CISA KEV into one entry each, with severity, exploitation status and fixed versions. New entries appear within minutes of their source. The feeds are free and need no API key; the newest 200 are listed below.
- Critical
- 10
- High
- 56
- On CISA KEV
- 0
Of the newest 149
- CVE-2026-126329Docker Sandboxes root privilege escalation via unverified state directoriesDocker Sandboxes
- CVE-2026-126330Docker Sandboxes unintended access via restored port publicationsDocker Sandboxes
- CVE-2026-115538Docker encryption bypass in overlay network trafficDocker Engine · Moby
- CVE-2026-115539Docker privilege escalation to manager in cluster API proxymoby SwarmKit · Docker Engine +1
- CVE-2026-123082Docker Desktop access token exposure in diagnostic logsDocker Desktop
- CVE-2026-121541Docker Buildx authorization bypass in Bake filesystem entitlementsDocker Buildx
- CVE-2026-121542Docker Buildx path traversal bypasses Bake file read approvalDocker Buildx
- CVE-2026-121614Docker Sandboxes code execution on host via tampered Git configDocker Sandboxes
- CVE-2026-93325Docker Buildx protection bypass in bake filesystem entitlementsDocker Buildx
- CVE-2026-112917Docker Desktop isolation bypass in WSL2 AF_VSOCK restrictionDocker Desktop
- CVE-2026-103916Docker Sandboxes host file access via symlink in copy commandDocker Sandboxes
- CVE-2026-114409Docker Desktop plaintext credentials exposed in local logsDocker Desktop
- CVE-2026-116102QuantGeekDev docker-mcp OS command injection in Windows command builderQuantGeekDev docker-mcp
- CVE-2026-116070Docker-Proxy auth bypass in hubcmdui config APIdqzboy Docker-Proxy
- CVE-2026-105445Docker Hub access token reassignment in account conversionDocker Hub
- CVE-2026-95838containerd: Unpack DoS via repeated opaque whiteoutscontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-95837containerd CRI plugin: Checkpoint restore bypasses destination security contextcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-106581Docker Desktop for Windows installer failed to verify external packagesDocker Desktop
- CVE-2026-105452Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsDocker Sandboxes
- CVE-2026-101998Fail-open response masking in Docker Sandboxes can expose proxy-managed credentialsDocker Sandboxes
- CVE-2026-105570Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostDocker Sandboxes
- CVE-2026-92543Docker Engine insecure-registry fallback via malicious DNS responsesDocker Engine · Moby
- CVE-2026-92542Blind VXLAN injection into encrypted overlay networks from cluster peerDocker Engine · Moby overlay network driver
- CVE-2026-103433Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsDocker Buildx
- CVE-2026-53493Containerd has image-pull DoS via crafted OCI index graph amplificationcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-79994Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker Sandboxes
- CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker Sandboxes
- CVE-2026-53495containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Servicecontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link followingmoby go-archive · Docker Sandboxes +5
- CVE-2026-18171Docker Sandboxes read-only runtime mount writable through its shared-export aliasDocker Sandboxes
- CVE-2026-53489containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restorecontainerd · github.com/containerd/containerd +1
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smugglingcontainerd · github.com/containerd/containerd +1
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoningcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-47262containerd image-triggered runtime DoS via unbounded group parsingcontainerd · github.com/containerd/containerd/v2 +1
- CVE-2026-46680containerd user ID handling bypass allows runAsNonRoot evasioncontainerd · github.com/containerd/containerd +1
- CVE-2026-53488containerd CRI plugin: — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pullcontainerd · github.com/containerd/containerd +1
- CVE-2026-41579runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsopencontainers runc · github.com/opencontainers/runc
- CVE-2026-12539Docker Sandboxes ICMP egress restriction bypass after daemon restartDocker Sandboxes
- CVE-2026-12039Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolutionDocker Sandboxes
- CVE-2026-42306Moby: Race condition in docker cp allows bind mount redirection to host pathmoby · github.com/docker/docker +2
- CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapmoby · github.com/docker/docker +2
- CVE-2026-41567Docker: PUT /containers/{id}/archive executes container binary on the hostmoby/v2/daemon · moby Docker Engine +4
- CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VMDocker Desktop
- CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingDocker Desktop
- CVE-2026-5817Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsDocker Desktop
- CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagDocker Desktop
- CVE-2026-5741suvarchal docker-mcp-server HTTP index.ts pull_image os command injectionsuvarchal docker-mcp-server
- CVE-2026-33997Moby: Off-by-one error in plugin privilege validationmoby · github.com/docker/docker +2
- CVE-2026-34040Moby: AuthZ plugin bypass with oversized request bodymoby · github.com/docker/docker +2
- CVE-2025-15558Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityDocker CLI · Docker Compose +4
- CVE-2026-27887Spin has memory leaks in various WIT interfacesspinframework spin · spinframework SpinKube +1
- CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel moduleDocker Desktop
- CVE-2025-14740Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesDocker Desktop
- CVE-2025-13743Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsDocker Desktop
- CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leakcontainerd · github.com/containerd/containerd +1
- CVE-2025-52881runc: LSM labels can be bypassed with malicious config using dummy procfs filesopencontainers runc · github.com/opencontainers/runc +1
- CVE-2025-52565container escape due to /dev/console mount and related racesopencontainers runc · github.com/opencontainers/runc
- CVE-2025-31133runc container escape via "masked path" abuse due to mount race conditionsopencontainers runc · github.com/opencontainers/runc
- CVE-2024-25621containerd affected by a local privilege escalation via wide permissions on CRI directorycontainerd · github.com/containerd/containerd +1
- CVE-2025-9164Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsDocker Desktop
- CVE-2025-10657Docker Desktop with ECI Fails to Enforce Socket Command RestrictionsDocker Desktop
- CVE-2025-9074Docker Desktop allows unauthenticated access to Docker Engine API from containersDocker Desktop
- CVE-2025-54410Moby's Firewalld reload removes bridge network isolationmoby · github.com/docker/docker
- CVE-2025-54388Moby's Firewalld reload makes published container ports accessible from remote hostsmoby · github.com/docker/docker
- CVE-2025-7381Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic imagesDocker Mautic
- CVE-2025-6587Exposure of system environment variables in Docker Desktop diagnostic logsDocker Desktop
- CVE-2025-47291containerd is an open-source container runtimecontainerd · github.com/containerd/containerd/v2
- CVE-2025-47290Containerd vulnerable to host filesystem access during image unpackcontainerd · github.com/containerd/containerd/v2
- CVE-2025-3911Exposure in Docker Desktop logs of environment variables configured for running containersDocker Desktop
- CVE-2025-4095Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profileDocker Desktop
- CVE-2025-3224Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionDocker Desktop
- CVE-2024-40635containerd has an integer overflow in User ID handlingcontainerd · github.com/containerd/containerd +1
- CVE-2025-1696Exposure of Proxy Credentials in Docker Desktop LogsDocker Desktop
- CVE-2024-36620moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.gogithub.com/moby/moby
- CVE-2024-36621moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.gogithub.com/moby/moby
- CVE-2024-36623moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application…github.com/moby/moby
- CVE-2024-9348Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewDocker Desktop
- CVE-2024-8696A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2Docker Desktop
- CVE-2024-8695A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2Docker Desktop
- CVE-2024-45310runc can be confused to create empty files/directories on the hostopencontainers runc · github.com/opencontainers/runc
- CVE-2024-41110Moby authz zero length regressionmoby · github.com/docker/docker +1
- CVE-2024-6222In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related…Docker Desktop
- CVE-2024-5652In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers modeDocker Desktop
- CVE-2024-32473Moby IPv6 enabled on IPv4-only network interfacesmoby · github.com/docker/docker
- CVE-2024-29018External DNS requests from 'internal' networks could lead to data exfiltrationmoby · github.com/docker/docker
- CVE-2024-24557Moby classic builder cache poisoningmoby · github.com/docker/docker +1
- CVE-2024-21626runc container breakout through process.cwd trickery and leaked fdsopencontainers runc · github.com/opencontainers/runc
- CVE-2023-0633In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPEDocker Desktop
- CVE-2023-0627Docker Desktop 4.11.x allows --no-windows-containers flag bypassDocker Desktop
- CVE-2023-0626Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box routeDocker Desktop
- CVE-2023-0625Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelogDocker Desktop
- CVE-2023-5166Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URLDocker Desktop
- CVE-2023-5165Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellDocker Desktop
- CVE-2023-1802In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedDocker Desktop
- CVE-2023-28840moby/moby's dockerd daemon encrypted overlay network may be unauthenticatedmoby · github.com/docker/docker
- CVE-2023-28841moby/moby's dockerd daemon encrypted overlay network traffic may be unencryptedmoby · github.com/docker/docker
- CVE-2023-28842moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticatedmoby · github.com/docker/docker
- CVE-2023-25809rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-28642AppArmor bypass with symlinked /proc in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-0629Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or…Docker Desktop
- CVE-2023-0628Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious…Docker Desktop
- CVE-2023-27561runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.gogithub.com/opencontainers/runc
- CVE-2023-25173containerd supplementary groups are not set up properlycontainerd · github.com/containerd/containerd
- CVE-2023-25153containerd OCI image importer memory exhaustioncontainerd · github.com/containerd/containerd
- CVE-2022-23471containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leakcontainerd · github.com/containerd/containerd
- CVE-2022-36109Moby vulnerability relating to supplementary group permissionsmoby · github.com/docker/docker
- CVE-2022-31030containerd CRI plugin: Host memory exhaustion through ExecSynccontainerd · github.com/containerd/containerd
- CVE-2022-29162Incorrect Default Permissions in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2022-24769Default inheritable capabilities for linux container should be emptymoby · github.com/docker/docker +1
- CVE-2022-23648Insecure handling of image volumes in containerd CRI plugincontainerd · github.com/containerd/containerd
- CVE-2021-43816Improper Preservation of Permissions in containerdcontainerd · github.com/containerd/containerd
- CVE-2021-43784Overflow in netlink bytemsg length field allows attacker to override netlink-based container configurationopencontainers runc · github.com/opencontainers/runc
- CVE-2021-23732Arbitrary Code Executiondocker-cli-js
- CVE-2021-41089docker cp allows unexpected chmod of host filesmoby · github.com/docker/docker +1
- CVE-2021-41091Insufficiently restricted permissions on data directory in Docker Enginemoby · github.com/docker/docker +1
- CVE-2021-41103Insufficiently restricted permissions on plugin directoriescontainerd · github.com/containerd/containerd
- CVE-2021-32760Archive package allows chmod of file outside of unpack target directorycontainerd · github.com/containerd/containerd
- CVE-2021-30465runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversalgithub.com/opencontainers/runc
- CVE-2021-21334environment variable leakcontainerd · github.com/containerd/containerd
- CVE-2021-21284privilege escalation in Mobymoby · github.com/moby/moby
- CVE-2021-21285Docker daemon crash during image pull of malicious imagemoby · github.com/moby/moby
- CVE-2020-27534util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an…github.com/moby/moby · github.com/docker/docker
- CVE-2020-15257containerd-shim API Exposed to Host Network Containerscontainerd · github.com/containerd/containerd
- CVE-2020-15157containerd can be coerced into leaking credentials during image pullcontainerd · github.com/containerd/containerd
- CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an…Docker
- CVE-2020-14298The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously…Docker
- CVE-2019-19921runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.gogithub.com/opencontainers/runc
- CVE-2014-8179Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to…Docker Engine · CS Docker Engine
- CVE-2014-8178Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a…Docker Engine · CS Docker Engine
- CVE-2014-9356Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image…github.com/docker/docker
- CVE-2019-16884runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because…github.com/opencontainers/runc · github.com/opencontainers/…
- CVE-2019-14271In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the…github.com/docker/docker · github.com/moby/moby
- CVE-2019-13509In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug loggithub.com/docker/docker
- CVE-2018-12608An issue was discovered in Docker Moby before 17.06.0github.com/docker/docker
- CVE-2018-11757In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may…Apache Software Foundation Docker Skeleton Runtime for Apac…
- CVE-2018-10892The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames[UNKNOWN] docker
- CVE-2017-16539The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels…github.com/moby/moby
- CVE-2016-9962RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the containergithub.com/opencontainers/runc
- CVE-2016-3697libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric…github.com/opencontainers/runc
- CVE-2015-3627Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an…github.com/docker/docker
- CVE-2015-3629Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an…github.com/docker/docker
- CVE-2015-3630Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive…github.com/docker/docker
- CVE-2015-3631Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /procgithub.com/docker/docker
- CVE-2014-9357Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive…github.com/docker/docker
- CVE-2014-9358Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation…github.com/docker/docker
- CVE-2014-6407Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operationgithub.com/docker/docker
- CVE-2014-6408Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an imagegithub.com/docker/docker
- CVE-2014-5277Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain…docker-py · github.com/docker/docker
- CVE-2014-3499Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectorsgithub.com/docker/docker
Get alerts for new Docker CVEs
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/feed?tech=docker
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/feed?tech=docker in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/feed?tech=docker&format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/feed?tech=docker&format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
Frequently asked questions
What are the latest Docker CVEs?
The newest are CVE-2026-126329 (Docker Sandboxes root privilege escalation via unverified state directories); CVE-2026-126330 (Docker Sandboxes unintended access via restored port publications); CVE-2026-115538 (Docker encryption bypass in overlay network traffic).
Are any Docker CVEs being exploited?
None of the 149 newest Docker vulnerabilities are on CISA's Known Exploited Vulnerabilities list.
How many critical Docker CVEs are there?
10 of the 149 newest are rated critical (CVSS 9.0 or higher, or rated critical by their source when they have no score): CVE-2026-112917, CVE-2026-105445, CVE-2026-77179, CVE-2026-53488, CVE-2025-9074 and more.
How do I get alerts for new Docker CVEs?
Subscribe to this page's RSS, Atom or JSON feed, or connect a coding agent to the cve.now MCP server. Each new entry appears within minutes of its source.
Is there an RSS feed of Docker CVEs?
Yes: https://cve.now/feed?tech=docker. Add format=atom or format=json for Atom or JSON Feed. It is free and needs no account or API key.
How do I get Docker CVEs in Slack or by email?
In Slack, run /feed subscribe https://cve.now/feed?tech=docker. For email, give the RSS URL to any RSS-to-email service.