CVE-2020-15360

com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification...

PT-2020-14389

Name of the Vulnerable Software and Affected Versions Docker Desktop version 2.3.0.3 Description The issue is related to a lack of client verification in com.docker.vmnetd, which allows privilege escalation. Recommendations For Docker Desktop version 2.3.0.3, at the moment, there is no informatio...

CVE-2020-15360: Missing Authorization

com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification...

Exploit for Link Following in Docker Desktop

CVE-2020-10665 Docker Desktop Local Privilege Escalation POC...

Exploit for Insufficient Verification of Data Authenticity in Foxitsoftware Phantompdf

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for...

Docker Elevation of Privilege Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

Design/Logic Flaw

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

CVE-2020-11492: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service which runs as SYSTEM, and then impersonate their privileges...

Exploit for Race Condition in Docker Docker_Desktop

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for...

PT-2020-12644

Name of the Vulnerable Software and Affected Versions Docker Desktop versions through 2.2.0.5 Description An issue allows a local attacker to intercept a connection attempt from Docker Service, which runs as SYSTEM, by setting up their own named pipe with the same name prior to starting Docker...

Docker Desktop for Windows PrivEsc (CVE-2020-11492)

TL;DR Docker Desktop for Windows suffers from a privilege escalation vulnerability to SYSTEM. The core of the issue lies with the fact that the Docker Desktop Service, the primary Windows service for Docker, communicates as a client to child processes using named pipes. The high privilege Docker...

Docker Desktop Local Elevation of Privilege Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

CVE-2020-10665

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...

CVE-2020-10665

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...

Privilege escalation

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...

CVE-2020-10665

CVE-2020-10665 affects Docker Desktop on Windows: local privilege escalation to NT AUTHORITY\SYSTEM due to mishandling of diagnostics collection with Administrator privileges, enabling arbitrary DACL overwrites and file writes. Affected products include Docker Desktop Enterprise before 2.1.0.9, D...

CVE-2020-10665

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...

PT-2020-12272

Name of the Vulnerable Software and Affected Versions Docker Desktop Enterprise versions prior to 2.1.0.9 Docker Desktop for Windows Stable versions prior to 2.2.0.4 Docker Desktop for Windows Edge versions prior to 2.2.2.0 LibreNMS versions prior to 1.48 Description The issue allows for local...

CVE-2020-10665: Improper Link Resolution Before File Access

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...