Out of Bounds Read Vulnerability in Docker Desktop Kernel Module
CVE-2026-2664

6.8MEDIUM

Key Information:

Vendor

Docker

Status
Docker Desktop
Vendor
CVE Published:
24 February 2026

What is CVE-2026-2664?

A vulnerability exists in the grpcfuse kernel module within Docker Desktop that can lead to an out of bounds read issue. This flaw affects users on Windows, Linux, and macOS up to version 4.61.0. A local attacker may exploit this vulnerability by writing to /proc/docker entries, potentially causing an impact on system stability or data integrity. The issue has since been resolved in Docker Desktop version 4.62.0, underscoring the importance of keeping software up to date to mitigate security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Docker Desktop Windows 0 < 4.62.0

References

https://docs.docker.com/desktop/release-notes/#4620

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pumpkin (@u1f383) from DEVCORE Research Team working with Trend Zero Day Initiative
JSON
.