Docker patched CVE-2025-9074 (CVSS 9.3), a flaw enabling container escape via unauthenticated API, risking host takeover.

A critical vulnerability in Docker Desktop for Windows and macOS allows compromising the host by running a malicious ...

"A malicious container running on Docker Desktop could access the Docker Engine and launch additional containers without ...

A critical vulnerability in Docker Desktop allows attackers to modify the filesystem of Windows hosts to become ...

Missing authentication on the Docker Engine management API for Docker Desktop on Windows and Mac allows attackers to break ...

Researchers find 9.3/10 flaw in Docker Desktop for Windows and macOS The bug allows threat actors to compromise underlying hosts and tamper with data A fix was quickly released, so users should patch ...

Learn the key differences between Docker Desktop and Docker Engine to optimize containerization, DevOps workflows, and development setups.

Security researchers have identified a new cyber-threat targeting publicly exposed instances of the Docker Engine API. In this campaign, attackers exploit misconfigurations to deploy a malicious ...