Vulnerabilities in Docker
51 resultsCVE-2026-5843HIGHDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingEPSS 0.2%CVE-2026-5817HIGHDocker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsEPSS 0.2%CVE-2026-55887HIGHMCP Gateway: Argument injection via OCI image label YAML in Docker MCP GatewayEPSS 0.2%CVE-2026-2664MEDIUMOut of bounds read vulnerability in grpcfuse kernel moduleEPSS 0.2%CVE-2026-6406HIGHDocker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagEPSS 0.2%CVE-2026-103916HIGHDocker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryEPSS 0.2%CVE-2026-77179CRITICALDocker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackEPSS 0.2%CVE-2025-0495MEDIUMSecrets leakage to telemetry endpoint via cache backend configuration via buildxEPSS 0.2%CVE-2026-112917CRITICALDocker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcallEPSS 0.2%CVE-2025-1696MEDIUMExposure of Proxy Credentials in Docker Desktop LogsEPSS 0.2%CVE-2025-3911MEDIUMExposure in Docker Desktop logs of environment variables configured for running containersEPSS 0.2%CVE-2026-101998MEDIUMFail-open response masking in Docker Sandboxes can expose proxy-managed credentialsEPSS 0.2%CVE-2025-4095MEDIUMRegistry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profileEPSS 0.2%CVE-2025-6587MEDIUMExposure of system environment variables in Docker Desktop diagnostic logsEPSS 0.1%CVE-2025-10657HIGHDocker Desktop with ECI Fails to Enforce Socket Command RestrictionsEPSS 0.1%CVE-2026-121542LOWBake filesystem path entitlements approval can be skipped for path using basename prefixEPSS 0.1%CVE-2026-105452MEDIUMDocker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsEPSS 0.1%CVE-2026-18171MEDIUMDocker Sandboxes read-only runtime mount writable through its shared-export aliasEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%CVE-2026-79994HIGHDocker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceEPSS 0.1%