CVE-2021-3162

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation...

CVE-2021-3162

Affected software: Docker Desktop Community for macOS prior to 2.5.0.0. Root cause: mishandling of certificate checking in this version. Impact: local privilege escalation. Remediation: upgrade to Docker Desktop Community 2.5.0.0 or newer (per linked release notes). If newer versions are unavaila...

CVE-2021-3162: Improper Certificate Validation

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation...

PT-2021-19449

Name of the Vulnerable Software and Affected Versions Docker Desktop Community versions prior to 2.5.0.0 Description The issue is related to the mishandling of certificate checking, which can lead to local privilege escalation. This problem is specific to Docker Desktop Community on macOS...

CVE-2019-15752: Incorrect Permission Assignment for Critical Resource

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restar...