https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2664.htmlhttps://patchthecve.com/cve/CVE-2026-2664.htmlWed, 17 Jun 2026 10:31:29 +0000HIGH 7.8: An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.6https://patchthecve.com/cve/CVE-2025-66549.htmlhttps://patchthecve.com/cve/CVE-2025-66549.htmlThu, 15 Oct 2026 21:10:00 +0000LOW 2.4: Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is fixehttps://patchthecve.com/cve/CVE-2025-56803.htmlhttps://patchthecve.com/cve/CVE-2025-56803.htmlWed, 17 Jun 2026 09:42:47 +0000HIGH 8.4: Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process.exec without validation, leading to poshttps://patchthecve.com/cve/CVE-2025-47792.htmlhttps://patchthecve.com/cve/CVE-2025-47792.htmlWed, 17 Jun 2026 09:28:42 +0000MEDIUM 5.0: Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextclhttps://patchthecve.com/cve/CVE-2025-3224.htmlhttps://patchthecve.com/cve/CVE-2025-3224.htmlWed, 17 Jun 2026 09:19:28 +0000HIGH 7.8: A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with hihttps://patchthecve.com/cve/CVE-2024-52510.htmlhttps://patchthecve.com/cve/CVE-2024-52510.htmlWed, 17 Jun 2026 08:07:21 +0000MEDIUM 4.2: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It is recommended that the Nextcloud Desktop https://patchthecve.com/cve/CVE-2024-46958.htmlhttps://patchthecve.com/cve/CVE-2024-46958.htmlWed, 17 Jun 2026 07:56:15 +0000CRITICAL 9.1: In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.https://patchthecve.com/cve/CVE-2024-6222.htmlhttps://patchthecve.com/cve/CVE-2024-6222.htmlWed, 17 Jun 2026 08:17:32 +0000HIGH 7.0: In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the ihttps://patchthecve.com/cve/CVE-2024-5652.htmlhttps://patchthecve.com/cve/CVE-2024-5652.htmlWed, 17 Jun 2026 08:16:22 +0000MEDIUM 6.1: In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.https://patchthecve.com/cve/CVE-2024-37885.htmlhttps://patchthecve.com/cve/CVE-2024-37885.htmlWed, 17 Jun 2026 07:38:59 +0000LOW 3.8: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud