CVE-2022-23774

Docker Desktop for Windows is affected by CVE-2022-23774 (and follow-on CVE-2022-25365 noting an incomplete fix). The vulnerability enables attackers to move arbitrary files due to issues in the Windows Docker Desktop implementation, with references indicating this affects versions before 4.4.4 a...

CVE-2021-45449

CVE-2021-45449 affects Docker Desktop versions 4.3.0 and 4.3.1. A bug may log sensitive information (access tokens or passwords) on a user’s machine during login. Exploitation requires local access to the user’s files. The description notes that only users who have logged in on 4.3.0/4.3.1 are af...