Access Control

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\v…CVE-2019-15752Docker · CVSS 7.8 · 49% likely

   CWE-732

2. Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the c…CVE-2014-9357Docker · 6.2% likely

   CWE-264

3. runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount t…CVE-2019-16884Docker · 4.4% likely

   CWE-863

4. Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options…CVE-2014-6408Docker · 3.1% likely

   CWE-264

5. Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the conta…CVE-2016-8867Docker · 2.8% likely

   CWE-264

6. Docker Desktop allows unauthenticated access to Docker Engine API from containersCVE-2025-9074Docker · CVSS 9.3 · 1.9% likely

   CWE-668

7. The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardwar…CVE-2018-10892Docker · CVSS 6.3 · 1.1% likely

   CWE-250

8. Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full c…CVE-2021-37841Docker · 1.0% likely

   CWE-732

9. com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.CVE-2020-15360Docker · 0.7% likely

   CWE-862

10. Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.CVE-2015-3631Docker · 0.6% likely

    CWE-264

11. In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and d…CVE-2024-6222Docker Inc. · CVSS 7.3 · 0.6% likely

    CWE-923

12. Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the hos…CVE-2015-3630Docker · 0.5% likely

    CWE-264

13. DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming modeCVE-2025-64443docker · CVSS 7.3 · 0.5% likely

    CWE-749

14. Docker Hub account conversion could reassign an active personal access token to another userCVE-2026-105445Docker · CVSS 9.4 · 0.4% likelycovered by CyberSIXT

    CWE-2662 articles

15. Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.CVE-2014-3499Docker · 0.4% likely

    CWE-264

16. libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileg…CVE-2016-3697Docker · 0.4% likely

    CWE-264

17. The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)…CVE-2020-14300Docker · 0.4% likely

    CWE-273

18. Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellCVE-2023-5165Docker Inc. · CVSS 7.1 · 0.3% likely

    CWE-424

19. The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which…CVE-2020-14298Docker · 0.3% likely

    CWE-273

20. Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field in…CVE-2022-37326Docker · CVSS 7.8 · 0.3% likely

    CWE-863

21. Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitionsCVE-2026-103433Docker · CVSS 6.9 · 0.3% likely

    CWE-862

22. Docker Model Runner Unauthenticated Runtime Flag Injection via _configure EndpointCVE-2026-28400docker · CVSS 7.6 · 0.3% likely

    CWE-749

23. Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionCVE-2025-3224Docker · CVSS 7.3 · 0.2% likely

    CWE-269

24. Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesCVE-2025-14740Docker Inc. · CVSS 6.7 · 0.2% likely

    CWE-732

25. Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersCVE-2023-0629Docker Inc. · CVSS 7.1 · 0.2% likely

    CWE-424

26. Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flagCVE-2026-6406Docker · CVSS 8.8 · 0.2% likely

    CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.