PT-2026-21675 · Grpcfuse+1 · Grpcfuse+1

Pumpkin · Publicado 2026-02-24 · Atualizado 2026-03-26 · CVE-2026-2664

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.62.0

Description An out of bounds read issue exists in the grpcfuse kernel module within the Linux VM used by Docker Desktop for Windows, Linux, and macOS. This could allow a local attacker to potentially cause harm by writing to /proc/docker entries. The vulnerable component is the grpcfuse kernel module.

Recommendations Update to Docker Desktop version 4.62.0 or later.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-2664

ZDI-26-125

Produtos afetados

Docker Desktop

Grpcfuse

Referências · 12

• https://reddit.com/r/Hosting_World/comments/1s42xks/two_new_docker_desktop_cves_you_should_know_about · Publicação no Reddit
• https://docs.docker.com/desktop/release-notes/#4620 · Nota
• https://t.me/cveNotify/152987 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-26-125 · Nota de Segurança
• https://twitter.com/SystemTek_UK/status/2027393876126740895 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-2664 · Nota de Segurança
• https://twitter.com/cracbot/status/2028062792742564268 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2664 · Aviso do Fabricante
• https://t.me/cveNotify/153545 · Publicação no Telegram
• https://twitter.com/cracbot/status/2027700481959793132 · Publicação no Twitter
• https://t.me/CVEtracker/45589 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2026265013439123833 · Publicação no Twitter