Docker Desktop@* Security Vulnerabilities and Issues — Docker Desktop@* CVE List

Lucene search

DockerDocker Desktop*

12 matches found

CVE•added 2022/02/01 6:15 a.m.•153 views

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.

5.3CVSS5.5AI score0.00302EPSS

CVE•added 2022/03/25 9:15 p.m.•145 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log f...

7.1CVSS6.7AI score0.00063EPSS

CVE•added 2020/06/05 2:15 p.m.•96 views

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service (which runs as SYSTEM), and then impersonate their privileges.

7.8CVSS7.4AI score0.00655EPSS

CVE•added 2023/03/13 12:15 p.m.•71 views

CVE-2023-0628

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

7.8CVSS7AI score0.00059EPSS

CVE•added 2022/05/25 4:15 p.m.•69 views

CVE-2021-44719

Docker Desktop 4.3.0 has Incorrect Access Control.

8.4CVSS8.3AI score0.00134EPSS

CVE•added 2023/09/25 4:15 p.m.•62 views

CVE-2023-0626

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0.

9.8CVSS8.3AI score0.00405EPSS

CVE•added 2023/03/13 12:15 p.m.•62 views

CVE-2023-0629

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch contai...

7.1CVSS6.9AI score0.0002EPSS

CVE•added 2023/09/25 4:15 p.m.•53 views

CVE-2023-5165

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assu...

8.8CVSS7.4AI score0.00015EPSS

CVE•added 2023/09/25 4:15 p.m.•51 views

CVE-2023-5166

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0.

8CVSS6.8AI score0.0018EPSS

CVE•added 2023/09/25 4:15 p.m.•50 views

CVE-2023-0633

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

7.8CVSS7.5AI score0.0007EPSS

CVE•added 2023/09/25 4:15 p.m.•42 views

CVE-2023-0627

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

7.8CVSS6.8AI score0.00035EPSS

CVE•added 2023/09/25 4:15 p.m.•36 views

CVE-2023-0625

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0.

9.8CVSS8.2AI score0.00405EPSS