Docker Desktop

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Docker Desktop allows unauthenticated access to Docker Engine API from containersCVE-2025-9074Docker · CVSS 9.3 · 1.9% likely

   CWE-668

2. A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.CVE-2024-8695Docker · CVSS 9 · 1.3% likely

   CWE-79

3. A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.CVE-2024-8696Docker · CVSS 8.9 · 1.2% likely

   CWE-79

4. An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker c…CVE-2020-11492Docker · 1.0% likely

   CWE-362

5. Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.CVE-2022-23774Docker · 0.9% likely
6. Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box routeCVE-2023-0626Docker Inc. · CVSS 8 · 0.9% likely

   CWE-94

7. Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelogCVE-2023-0625Docker Inc. · CVSS 8 · 0.9% likely

   CWE-79

8. Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URLCVE-2023-5166Docker Inc. · CVSS 8 · 0.8% likely

   CWE-200

9. com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.CVE-2020-15360Docker · 0.7% likely

   CWE-862

10. In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and d…CVE-2024-6222Docker Inc. · CVSS 7.3 · 0.6% likely

    CWE-923

11. In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedCVE-2023-1802Docker · CVSS 5.9 · 0.5% likely

    CWE-319

12. Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewCVE-2024-9348Docker · CVSS 8.9 · 0.5% likely

    CWE-20

13. Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer…CVE-2022-26659Docker · 0.4% likely

    CWE-59

14. Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they…CVE-2021-45449Docker · 0.4% likely

    CWE-532

15. In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPECVE-2023-0633Docker Inc. · CVSS 7.2 · 0.4% likely

    CWE-88

16. In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windo…CVE-2024-5652Docker Inc. · CVSS 6.1 · 0.4% likely

    CWE-400

17. Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellCVE-2023-5165Docker Inc. · CVSS 7.1 · 0.3% likely

    CWE-424

18. Docker Desktop 4.3.0 has Incorrect Access Control.CVE-2021-44719Docker · 0.3% likely
19. Docker Desktop 4.11.x allows --no-windows-containers flag bypassCVE-2023-0627Docker Inc. · CVSS 6.7 · 0.3% likely

    CWE-501

20. Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted mali…CVE-2023-0628Docker Inc. · CVSS 6.1 · 0.3% likely

    CWE-77

21. Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionCVE-2025-3224Docker · CVSS 7.3 · 0.2% likely

    CWE-269

22. Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logsCVE-2025-13743Docker · CVSS 2.4 · 0.2% likely

    CWE-532

23. Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadingCVE-2026-5843Docker · CVSS 8.2 · 0.2% likely

    CWE-829

24. Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backendsCVE-2026-5817Docker · CVSS 8.2 · 0.2% likely

    CWE-829

25. Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation VulnerabilitiesCVE-2025-14740Docker Inc. · CVSS 6.7 · 0.2% likely

    CWE-732

26. Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containersCVE-2023-0629Docker Inc. · CVSS 7.1 · 0.2% likely

    CWE-424

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.