7.2
High
CVE-2023-0633 In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation…
Description
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Desktop 4.12 | earliest → < 4.12.0 | 4.12.0 |
References
- docs.docker.com docs.docker.com
Timeline
- Published
- Last modified
Other CVEs of Docker Desktop
The 11 CVEs of Docker Desktop →
CVE-2025-14740
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling…
6.7
Medium
CVE-2024-6222
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container…
7.3
High
CVE-2024-5652
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service…
6.1
Medium
CVE-2023-0627
Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local…
6.7
Medium