Vulnerabilities

TI-2023-00600 CVE-2023-0633 · GHSA-rgjx-xmjq-vjfg

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

LOW 36

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0039 Published 2023-09-25 Fixed in 4.12.0 CWE-88

TI-2023-00593 CVE-2023-0626 · GHSA-c2x5-vqm4-5hj4

Code injection in Docker Desktop

MEDIUM 44

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0087 Published 2023-09-25 Fixed in 4.12.0 CWE-94

TI-2023-00592 CVE-2023-0625 · GHSA-xrpp-3rf6-w42j

Cross-site scripting in Docker Desktop

MEDIUM 44

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0087 Published 2023-09-25 Fixed in 4.12.0 CWE-79

Vulnerabilities

Filters

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

Code injection in Docker Desktop

Cross-site scripting in Docker Desktop