CVE-2022-23774

Docker Desktop for Windows is affected by CVE-2022-23774 (and follow-on CVE-2022-25365 noting an incomplete fix). The vulnerability enables attackers to move arbitrary files due to issues in the Windows Docker Desktop implementation, with references indicating this affects versions before 4.4.4 a...

CVE-2022-26659

Docker Desktop for Windows prior to version 4.6.0 is affected. The installer can be abused to overwrite administrator-writable files by creating a symlink that redirects the log file path, as described in RH and NVD entries for CVE-2022-26659. Starting with 4.6.0, the installer writes logs to a l...

CVE-2021-44719

Summary: CVE-2021-44719 affects Docker Desktop 4.3.0 with an Incorrect Access Control issue. The vulnerability is described as a local-privilege/host-access problem where a container could access restricted host files, bypassing the allowed sharing rules (per Nessus NASL description for Mac, and ...

CVE-2021-45449

CVE-2021-45449 affects Docker Desktop versions 4.3.0 and 4.3.1. A bug may log sensitive information (access tokens or passwords) on a user’s machine during login. Exploitation requires local access to the user’s files. The description notes that only users who have logged in on 4.3.0/4.3.1 are af...