IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.8Medium

CVE-2026-2664Out of bounds read vulnerability in grpcfuse kernel module

Docker Docker Desktop Published: (8 months ago)

Description

An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .

Weakness (CWE): CWE-125

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
docker desktop < 4.62.0
Docker Docker Desktop < 4.62.0

References and patches

CPE matches (NVD) (3)
  • cpe:2.3:a:docker:desktop:*:*:*:*:*:linux:*:* < 4.62.0
  • cpe:2.3:a:docker:desktop:*:*:*:*:*:macos:*:* < 4.62.0
  • cpe:2.3:a:docker:desktop:*:*:*:*:*:windows:*:* < 4.62.0

Recent CVEs in the same product — Docker / Moby

5.7Medium
CVE-2026-123082

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

6.7Medium
CVE-2026-121522

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.