CVE-2022-37326

Docker Desktop for Windows before 4.6.0 allows attackers to delete or create any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation...

CVE-2022-37326

Docker Desktop for Windows before 4.6.0 allows attackers to delete or create any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation...

CVE-2022-37326

Docker Desktop for Windows before 4.6.0 is affected. The flaw resides in the dockerBackendV2 WindowsContainersStart API, where the pidfile field inside the DaemonJSON WindowsContainerStartRequest can be controlled to delete or create arbitrary files. This can indirectly enable privilege escalatio...