Docker vulnerabilities
We track 48 vulnerabilities in Docker products across 17 products. 48 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 12, 2026.
Latest Docker vulnerabilities
- 7.8 High severity
Desktop: Incorrect Authorization
Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can ind
- 7.1 High severity
Desktop: Improper Link Resolution Before File Access
Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31647.
- 7.1 High severity
Desktop: Improper Link Resolution Before File Access
Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.
- 7.5 High severity
Docker Desktop: Cleartext Transmission of Sensitive Information
In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targeted network sniffing attack can lead to a disclosure of sensitive information. Only users who have Acce
- 7.1 High severity
Docker Desktop: Improper Protection of Alternate Path
Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST
- 7.8 High severity
Docker Desktop: Improper Neutralization of Special Elements used in a Command
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
- 7.1 High severity
Docker Desktop: Improper Link Resolution Before File Access
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer,
- 7.8 High severity
Docker Desktop Community Edition Privilege Escalation Exploited
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service use