Skip to content

Docker · weakness class

Information Disclosure

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug lo…CVE-2019-13509Docker · 3.7% likely

    CWE-532

  2. Docker CLI leaks private registry credentials to registry-1.docker.ioCVE-2021-41092docker · CVSS 5.4 · 1.7% likely

    CWE-200

  3. Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URLCVE-2023-5166Docker Inc. · CVSS 8 · 0.8% likely

    CWE-200

  4. Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they…CVE-2021-45449Docker · 0.4% likely

    CWE-532

  5. Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsCVE-2025-13743Docker · CVSS 2.4 · 0.2% likely

    CWE-532

  6. Secrets leakage to telemetry endpoint via cache backend configuration via buildxCVE-2025-0495docker · CVSS 4.1 · 0.2% likely

    CWE-532

  7. Exposure of Proxy Credentials in Docker Desktop LogsCVE-2025-1696Docker · CVSS 5.2 · 0.2% likely

    CWE-532

  8. Exposure in Docker Desktop logs of environment variables configured for running containersCVE-2025-3911Docker · CVSS 5.2 · 0.2% likely

    CWE-532

  9. Exposure of system environment variables in Docker Desktop diagnostic logsCVE-2025-6587Docker · CVSS 5.2 · 0.1% likely

    CWE-532

  10. Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsCVE-2026-105452Docker · CVSS 5.9 · 0.1% likely

    CWE-200

  11. Docker Desktop logs can expose the Docker Hub access tokenCVE-2026-123082Docker · CVSS 5.7 · 0.1% likely

    CWE-532

  12. Docker Desktop logs can expose stored third-party credentialsCVE-2026-114409Docker · CVSS 5.7 · 0.1% likely

    CWE-532

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.