| CVE-2025-14740 |
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling…
|
6.7
Medium
|
Feb 4, 2026 |
| CVE-2024-6222 |
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container…
|
7.3
High
|
Jul 9, 2024 |
| CVE-2024-5652 |
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service…
|
6.1
Medium
|
Jul 9, 2024 |
| CVE-2023-0633 |
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation…
|
7.2
High
|
Sep 25, 2023 |
| CVE-2023-0627 |
Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local…
|
6.7
Medium
|
Sep 25, 2023 |
| CVE-2023-0626 |
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
|
8.0
High
|
Sep 25, 2023 |
| CVE-2023-0625 |
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
|
8.0
High
|
Sep 25, 2023 |
| CVE-2023-5166 |
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
|
8.0
High
|
Sep 25, 2023 |
| CVE-2023-5165 |
Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via…
|
7.1
High
|
Sep 25, 2023 |
| CVE-2023-0629 |
Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by…
|
7.1
High
|
Mar 13, 2023 |
| CVE-2023-0628 |
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container…
|
6.1
Medium
|
Mar 13, 2023 |