CVE-2021-37841: Docker Desktop

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with low privilege to read, write and possibly even execute code inside the containers.

Affected products

• Docker Desktop: before 3.6.0 (fixed in 3.6.0)

Published 2021-08-12. Last modified 2026-06-17.