6.1
Moyenne
CVE-2023-0628 Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container…
Description
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Docker Desktop 4.17 | premières → < 4.17.0 | 4.17.0 |
Références
- docs.docker.com docs.docker.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Docker Desktop
Les 11 CVE de Docker Desktop →
CVE-2025-14740
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling…
6.7
Moyenne
CVE-2024-6222
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container…
7.3
Élevée
CVE-2024-5652
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service…
6.1
Moyenne
CVE-2023-0633
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation…
7.2
Élevée