Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Docker Desktop 4.17.0 Clear all filters
TI-2023-00596 CVE-2023-0629 · GHSA-623v-x3rr-q8qh

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container…

Priority LOW 33

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00218 Published 2023-03-13 Fixed in 4.17.0 CWE-424
TI-2023-00595 CVE-2023-0628 · GHSA-pf8f-jj2r-7pj2

Command injection in Docker Desktop

Priority LOW 34

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00265 Published 2023-03-13 Fixed in 4.17.0 CWE-77