CVE-2025-9164
published 2025-10-27CVE-2025-9164: Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads…
PriorityP341high8.8CVSS 4.0
AVLACHATPPRLUINVCHVIHVAHSCHSIHSAHEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSPAUYRUVCREXUX
EPSS
0.10%
1.0th percentile
Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| docker | docker_desktop | <= 4.48.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2025-13743 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.7
CVE-2025-13743 [HIGH] CVE-2025-13743 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-13743 :
Docker Desktop vulnerability analysis and mitigation
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.
Source : NVD
## 2.4
Score
Published December 9, 2025
Severity LOW
CNA Score 2.4
Affected Technologies
Docker Desktop
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.9
Exploitation Probability (EPSS) N/A
Affected packages and libraries
cpe:2.3:a:docker:docker_desktop
cpe:2.3:a:docker:desktop
Sources
Windows Severity HIGH Has Fix Added at: Dec 11, 2025
Windows Seve
Wiz
CVE-2025-14740 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.7
CVE-2025-14740 [MEDIUM] CVE-2025-14740 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-14740 :
Docker Desktop vulnerability analysis and mitigation
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installer creates this directory without proper ownership verification, creating two exploitation scenarios:
Scenario 1 (Persistent Attack):
If a low-privileged attacker pre-creates C:\ProgramData\DockerDesktop before Docker Desktop installation, the attacker retains ownership of the directory even after the installer applies restrictive ACLs. At any time after installation completes, the attacker can modify the directory ACL (as the owner) and tamper with critical configuration files such as install-settings.json to specify a malicious credentia
Wiz
CVE-2026-2664 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.7
CVE-2026-2664 [HIGH] CVE-2026-2664 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-2664 :
Docker Desktop vulnerability analysis and mitigation
An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .
Source : NVD
## 6.8
Score
Published February 24, 2026
Severity MEDIUM
CNA Score 6.8
Affected Technologies
Docker Desktop
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 3.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
cpe:2.3:a:docker:desktop
Sources
Windows Severity HIGH Has Fix Added a
2025-10-27
Published