Skip to content
Threat Feed
Subscribe

Product

Docker Desktop

5 briefs RSS
high advisory

Docker Desktop: Container-to-host write via exposed Engine API (CVE-2025-9074)

A public proof-of-concept for CVE-2025-9074 demonstrates that the Docker Engine API exposure on Docker Desktop for Windows allows container escape and unauthorized host file system access.

Docker Desktop container-escape docker windows cve-2025-9074
2t 1c
high advisory

Docker Desktop Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in Docker Desktop for Windows allows a local attacker to execute arbitrary code with administrative privileges.

Docker Desktop
1t
high advisory

Multiple Vulnerabilities in Docker Sandbox Environments

Multiple vulnerabilities in Docker sandbox environments allow a local attacker to execute arbitrary code and bypass security restrictions.

Docker Desktop +1 vulnerability container-security linux cloud
1t
critical advisory

Multiple Vulnerabilities in Docker Desktop Allow Remote Code Execution

Multiple vulnerabilities in Docker Desktop versions prior to 4.71.0 allow a remote attacker to execute arbitrary code.

Docker Desktop vulnerability rce docker
2r 1t
low advisory

Ingress Transfer via Windows BITS

Adversaries may leverage Windows Background Intelligent Transfer Service (BITS) to download executable and archive files to evade defenses and establish command and control.

Background Intelligent Transfer Service +2 bits ingress-transfer command-and-control defense-evasion windows
2r 2t