A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

Docker Desktop allows unauthenticated access to Docker Engine API from containers

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time…

Docker Desktop with ECI Fails to Enforce Socket Command Restrictions

Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

Docker Desktop 4.3.0 has Incorrect Access Control

Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Out of bounds read vulnerability in grpcfuse kernel module

Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop:…

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted…

com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows

Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or…

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer…

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files

Exposure of system environment variables in Docker Desktop diagnostic logs

Exposure in Docker Desktop logs of environment variables configured for running containers

Exposure of Proxy Credentials in Docker Desktop Logs

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile