Docker Desktop

Name: Docker Desktop
Brand: Docker

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical9high0medium1low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	4.72.0	2026-04-22	< 4.72.0
CVE-2024-0132US	high8.3	40.8% (99th)	Exploit	4.34.3	2024-09-26	< 4.34.3
CVE-2025-23266US	—	3.32% (89th)	Exploit	4.44	2025-07-17	< 4.44
CVE-2025-31133US	high7.8	1.24% (69th)	Exploit	4.53.0	2025-11-06	< 4.53.0
CVE-2025-52881US	high7.5	0.80% (56th)	Exploit	4.53.0	2025-11-06	< 4.53.0
CVE-2026-5843US	high8.6	0.22% (13th)	Exploit	4.68.0	2026-05-22	2 versions
CVE-2026-5817US	high8.6	0.22% (13th)	Exploit	4.68.0	2026-05-22	< 4.68.0
CVE-2025-52565US	high7.5	0.81% (57th)	—	4.53.0	2025-11-06	< 4.53.0
CVE-2026-31433US	—	0.60% (49th)	—	4.72.0	2026-04-22	< 4.72.0
CVE-2026-31432US	—	0.51% (43rd)	—	4.72.0	2026-04-22	< 4.72.0
CVE-2024-9348US	—	0.47% (41st)	—	4.34.3	2024-10-16	< 4.34.3
CVE-2026-28400US	—	0.26% (17th)	—	4.62.0	2026-02-27	< 4.62.0
CVE-2026-33990US	—	0.25% (17th)	—	4.67.0	2026-04-01	2 versions
CVE-2025-3224US	high7.8	0.25% (16th)	—	4.41.0	2025-04-28	< 4.41.0
CVE-2024-0133US	low3.4	0.25% (16th)	—	4.34.3	2024-09-26	< 4.34.3
CVE-2025-14740US	—	0.23% (13th)	—	no fix	2026-02-04	≤ 4.56.0
CVE-2025-13743US	high7.5	0.21% (12th)	—	4.54.0	2025-12-09	< 4.54.0
CVE-2026-2664US	high7.8	0.21% (11th)	—	4.62.0	2026-02-24	< 4.62.0
CVE-2026-6406US	—OT elevated	0.21% (11th)	—	4.59.0	2026-05-22	< 4.59.0
CVE-2025-1696US	—	0.17% (7th)	—	4.39.0	2025-03-06	< 4.39.0
CVE-2025-3911US	—	0.17% (6th)	—	4.41.0	2025-04-29	< 4.41.0
CVE-2026-53495US	—	0.16% (5th)	—	4.92.0	2026-09-14	< 4.92.0
CVE-2025-4095US	—OT elevated	0.15% (4th)	—	4.41.0	2025-04-29	< 4.41.0
CVE-2025-6587US	—	0.15% (4th)	—	4.43.0	2025-07-03	< 4.43.0
CVE-2026-8936US	—	0.11% (2nd)	—	4.76.0	2026-06-02	< 4.76.0
CVE-2025-9164US	—	0.11% (1st)	—	4.49.0	2025-10-27	< 4.49.0
CVE-2026-106581US	—	0.07% (0th)	—	4.92.0	2026-10-09	< 4.92.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-532Insertion of Sensitive Information into Log File4 CVEs
CWE-363Race Condition Enabling Link Following3 CVEs
CWE-61UNIX Symbolic Link (Symlink) Following3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan