8.2
Élevée
CVE-2026-106581 Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop…
Description
Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted package and convince a user to approve the Docker-signed UAC prompt could execute attacker-controlled installer actions as LocalSystem.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Docker Desktop 4.92 | premières → < 4.92.0 | 4.92.0 |
Autres CVE de Docker Desktop
Les 22 CVE de Docker Desktop →
CVE-2026-112917
Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall
9.2
Critique
CVE-2026-114409
Docker Desktop logs can expose stored third-party credentials
5.7
Moyenne
CVE-2026-17106
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer…
7.1
Élevée
CVE-2026-8936
Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested…
8.2
Élevée