[ Vendor · 9 CVEs ]
Docker
CVEs affecting Docker published in the last 30 days, plus any Docker CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105445 | 13 Oct 2026 | CVSS 9.4 | Docker HubAn Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to… | |
| CVE-2026-106581 | 9 Oct 2026 | CVSS 7.3 | Docker DesktopBefore 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An… | |
| CVE-2026-105570 | 8 Oct 2026 | CVSS 6.7 | Docker SandboxesDocker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request… | |
| CVE-2026-101998 | 8 Oct 2026 | CVSS 5.9 | Docker SandboxesDocker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an… | |
| CVE-2026-105452 | 8 Oct 2026 | CVSS 5.9 | Docker SandboxesDocker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate… | |
| CVE-2026-92542 | 7 Oct 2026 | CVSS 6.9 | Docker EngineThe firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged… | |
| CVE-2026-92543 | 7 Oct 2026 | CVSS 7.6 | Docker EngineDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as… | |
| CVE-2026-103433 | 5 Oct 2026 | CVSS 6.9 | Docker BuildxDocker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable… | |
| CVE-2019-15752 | 28 Aug 2019 | CVSS 7.8 | Docker Desktop Community Edition Privilege EscalationDocker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in… | Exploited |