6.1
Medium
CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service…
Description
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Desktop 4.31 | earliest → < 4.31.0 | 4.31.0 |
References
- docs.docker.com docs.docker.com
Timeline
- Published
- Last modified
Other CVEs of Docker Desktop
The 11 CVEs of Docker Desktop →
CVE-2025-14740
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling…
6.7
Medium
CVE-2024-6222
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container…
7.3
High
CVE-2023-0633
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation…
7.2
High
CVE-2023-0627
Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local…
6.7
Medium