How many Docker Docker Desktop CVEs are in CISA KEV?

Yes — 1 of Docker Docker Desktop's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Docker Docker Desktop vulnerabilities?

Yes — 4 of Docker Docker Desktop's CVEs have a known public exploit.

Which versions of Docker Docker Desktop are affected?

58 distinct Docker Docker Desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Docker Docker Desktop CVEs?

Docker Docker Desktop's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization), CWE-269 (Improper Privilege Management), CWE-732 (Incorrect Permission Assignment for Critical Resource).

How many critical Docker Docker Desktop vulnerabilities are there?

Docker Docker Desktop has 4 critical and 23 high-severity CVEs.

What is the average severity of Docker Docker Desktop CVEs?

The average CVSS base score across Docker Docker Desktop's scored CVEs is 7.5.

Docker Desktop Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Docker Desktop vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Docker Desktop Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Docker Desktop has 37 published CVE records since 2019, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Docker Desktop, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include arm, linux, macos, windows, windows (hyper-v), x86.

Severity and exploitation

How the CVSS severity of Docker Desktop's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High23

Medium9

Low1

In CISA’s Known Exploited Vulnerabilities catalog

One of Docker Desktop's CVEs is confirmed exploited in the wild.

Public exploits

4 of Docker Desktop's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Docker Desktop version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.12.03 CVEs
< 4.34.22 CVEs
< 4.41.02 CVEs
< 4.17.01 CVE
< 4.23.01 CVE
< 4.34.31 CVE
< 4.39.01 CVE
< 4.4.41 CVE
< 4.43.01 CVE
< 4.5.01 CVE
< 4.6.01 CVE
< 4.62.01 CVE

Common weakness types

The CWE weakness categories most often found in Docker Desktop CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Docker Desktop CVEs were published each year.

2019

2020

2022

2023

2024

2025

2026

Other Docker products

Browse vulnerabilities for other products by Docker.

docker54 CVEs github.com/docker/docker33 CVEs desktop14 CVEs engine6 CVEs Docker Sandboxes4 CVEs cli3 CVEs compose3 CVEs Docker Engine3 CVEs

All Docker vulnerabilities

Frequently asked questions

Common questions about Docker Desktop vulnerabilities.

How many CVEs does Docker Docker Desktop have?: Docker Docker Desktop has 37 published CVE records since 2019.
How many Docker Docker Desktop CVEs are in CISA KEV?: Yes — 1 of Docker Docker Desktop's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Docker Docker Desktop vulnerabilities?: Yes — 4 of Docker Docker Desktop's CVEs have a known public exploit.
Which versions of Docker Docker Desktop are affected?: 58 distinct Docker Docker Desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Docker Docker Desktop CVEs?: Docker Docker Desktop's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization), CWE-269 (Improper Privilege Management), CWE-732 (Incorrect Permission Assignment for Critical Resource).
How many critical Docker Docker Desktop vulnerabilities are there?: Docker Docker Desktop has 4 critical and 23 high-severity CVEs.
What is the average severity of Docker Docker Desktop CVEs?: The average CVSS base score across Docker Docker Desktop's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Docker Desktop vulnerabilities

Monitor new Docker Desktop vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing