| CVE-2025-14740 |
Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling…
|
6.7
Moyenne
|
4 févr. 2026 |
| CVE-2024-6222 |
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container…
|
7.3
Élevée
|
9 juil. 2024 |
| CVE-2024-5652 |
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service…
|
6.1
Moyenne
|
9 juil. 2024 |
| CVE-2023-0633 |
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation…
|
7.2
Élevée
|
25 sept. 2023 |
| CVE-2023-0627 |
Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local…
|
6.7
Moyenne
|
25 sept. 2023 |
| CVE-2023-0626 |
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
|
8.0
Élevée
|
25 sept. 2023 |
| CVE-2023-0625 |
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
|
8.0
Élevée
|
25 sept. 2023 |
| CVE-2023-5166 |
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
|
8.0
Élevée
|
25 sept. 2023 |
| CVE-2023-5165 |
Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via…
|
7.1
Élevée
|
25 sept. 2023 |
| CVE-2023-0629 |
Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by…
|
7.1
Élevée
|
13 mars 2023 |
| CVE-2023-0628 |
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container…
|
6.1
Moyenne
|
13 mars 2023 |