CVE-2026-2664Disclosure(docker / desktop)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch docker desktop systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .

docker CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://docs.docker.com/desktop/release-notes/#4620

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

desktop

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 4d ago at 1 mentions (2026-02-24); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

docker

Products

desktop

Deep dive

Activity timeline5 mentions / 5d

Signal classification3 categories

Disclosure

360.0%

General

120.0%

Patch

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	1	Disclosure1
2026-02-27	1	General1
2026-02-28	1	Disclosure1
2026-03-01	1	Disclosure1
2026-09-17	1	Patch1

Full discourse5 posts

Threat Landscape@LandscapeThreat21d
Patch
Docker disclosed two Docker Sandboxes vulnerabilities that can allow malicious guest environments to escape workspace isolation and access host resources. CVE-2026-77179, affecting macOS versions before 0.42.0, enables symlink-race redirection of filesystem operations, potentially permitting arbitrary file read/write and host code execution. CVE-2026-79994, affecting versions before 0.42.0, can redirect guest-to-host Unix socket connections to unauthorized AF_UNIX sockets, enabling data disclosure or access to host-side functions. Docker recommends upgrading to 0.42.0 or later, using clone mode, removing writable host mounts, and minimizing sensitive data in shared paths. VULNERABILITY CVE-2026-17106 CVE-2026-2664 CVE-2026-28400 CVE-2026-33990 CVE-2026-5817 CVE-2026-5843 CVE-2026-77179 CVE-2026-79994
Post summary
Docker disclosed two sandbox escape vulnerabilities (CVE-2026-77179 and CVE-2026-79994) affecting macOS before version 0.42.0 and recommended upgrading to 0.42.0 or later, using clone mode, removing writable host mounts, and minimizing sensitive data.
2004173
98 followersView on X
CRAC Learning - Tech@cracbot221d
Disclosure
CVE-2026-2664 (CVSS:6.8, HIGH) is Analyzed. An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows,..https://nvd.nist.gov/vuln/detail/CVE-2026-2664 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-2664, noting it as an out-of-bounds read in the grpcfuse kernel module used by Docker Desktop for Windows, but provides no evidence of exploitation, patches, or PoC.
0000032
173 followersView on X
CRAC Learning - Tech@cracbot222d
Disclosure
CVE-2026-2664 (CVSS:6.8, HIGH) is Analyzed. An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows,..https://nvd.nist.gov/vuln/detail/CVE-2026-2664 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE‑2026‑2664 is flagged as a high‑severity out‑of‑bounds read vulnerability in the grpcfuse kernel module used in Docker Desktop for Windows, with CVSS 6.8 and an NVD reference.
0000039
173 followersView on X
SystemTek - Technology news website@SystemTek_UK223d
General
Docker Desktop grpcfuse Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2026-2664) #CVE20262664 #CyberSecurity #Docker #InformationDisclosureVulnerability https://www.systemtek.co.uk/?p=48550 https://t.co/syfHHzkymV
Post summary
The tweet merely announces CVE‑2026‑2664 and links to a blog article, with no additional technical or exploit details provided.
0000046
1.8K followersView on X
CVE@CVEnew226d
Disclosure
CVE-2026-2664 An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allo… https://www.cve.org/CVERecord?id=CVE-2026-2664
Post summary
The text announces CVE-2026-2664, an out-of-bounds read in the grpcfuse kernel module affecting Docker Desktop up to v4.61.0, with no PoC, exploit, or patch details provided.
00000134
56.5K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	docker	desktop	-	linux	-
App	docker	desktop	-	macos	-
App	docker	desktop	-	windows	-

Explore more

Back to dashboard docker CVEs desktop vulnerabilities

What researchers are saying

CVE-2026-2664

Threat Landscape[verified]@LandscapeThreatPatch

Docker disclosed two sandbox escape vulnerabilities (CVE-2026-77179 and CVE-2026-79994) affecting macOS before version 0.42.0 and recommended upgrading to 0.42.0 or later, using clone mode, removing writable host mounts, and minimizing sensitive data.

CRAC Learning - Tech@cracbotDisclosure

The post references CVE-2026-2664, noting it as an out-of-bounds read in the grpcfuse kernel module used by Docker Desktop for Windows, but provides no evidence of exploitation, patches, or PoC.

CRAC Learning - Tech@cracbotDisclosure

CVE‑2026‑2664 is flagged as a high‑severity out‑of‑bounds read vulnerability in the grpcfuse kernel module used in Docker Desktop for Windows, with CVSS 6.8 and an NVD reference.

SystemTek - Technology news website@SystemTek_UKGeneral

The tweet merely announces CVE‑2026‑2664 and links to a blog article, with no additional technical or exploit details provided.

CVE@CVEnewDisclosure

The text announces CVE-2026-2664, an out-of-bounds read in the grpcfuse kernel module affecting Docker Desktop up to v4.61.0, with no PoC, exploit, or patch details provided.