Docker Buildx and Desktop affected by security vulnerabilities
Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0 have vulnerabilities.
50
Product
Docker Desktop
- Mentions · 7d1
- Mentions · 30d1
- All mentions4
- First seenSep 17, 2026
- Last mentioned4d ago
Timeline
4 articles · newest firstCopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.
62
Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces
Docker patched two sandbox-escape flaws, CVE-2026-77179 and CVE-2026-79994, letting malicious guest workloads access host files and sockets.
62
Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files
Docker fixed two symlink-race flaws in Docker Sandboxes, CVE-2026-77179 and CVE-2026-79994, letting malicious guests escape the workspace and read host files; fixed in 0.42.0.
55
Related CVEs
by mentions- CVE-2026-17106<1%7.1Path Traversal via Link Following in Moby go-archive Tar Extraction
- CVE-2026-77179<1%9.4Symlink Escape in Docker Sandboxes virtio-fs Exposes macOS Host Files
- TOCTOU Symlink Race in Docker Sandboxes Socket Relay Exposes Host Sockets
- CVE-2026-5817<1%8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without…
- CVE-2026-5843<1%8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model…
- CVE-2026-28400<1%7.5Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker
- CVE-2026-2664<1%6.8An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0…
- CVE-2026-33990<1%6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker
Appears with
- Dockervendor · 4
- Docker Sandboxesproduct · 3
- Dockerorganization · 2
- Docker Model Runnerproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
- runcproduct · 1
- Docker CLIproduct · 1
- Impervaorganization · 1
- moby/go-archiveproduct · 1
- Docker Engineproduct · 1
- Docker Buildxproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.