CVE-2026-2664 MEDIUM

CVE-2026-2664: Out of bounds read vulnerability in grpcfuse kernel module

Vendor Docker
Product Docker Desktop
Weakness CWE-125
Published February 24, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .

Key dates

02Disclosure timeline

February 24, 2026 CVE published
February 26, 2026 Record updated