PT-2026-21675

CVE-2026-2664

Published

2026-02-24

Updated

2026-09-17

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.62.0

Description An out of bounds read issue exists in the grpcfuse kernel module within the Linux VM used by Docker Desktop for Windows, Linux, and macOS. This could allow a local attacker to potentially cause harm by writing to /proc/docker entries. The vulnerable component is the grpcfuse kernel module.

Recommendations Update to Docker Desktop version 4.62.0 or later.

Exploitability

Fix

Impacts

Researchers

Pumpkin

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2026-2664