HIGH🇵🇱 Wersja polska

CVE-2023-0626

CVSS 8.0v3.1pub. 2023-09-25upd. 2024-11-21

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Docker Desktop

    APP
    Docker
    < 4.12.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2026-6406HIGH8.8ten sam produkt

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Deskto...

CVE-2026-5843HIGH8.8ten sam produkt

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally impor...

CVE-2026-5817HIGH8.8ten sam produkt

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True w...

CVE-2023-5165HIGH7.1ten sam produkt

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrict...

CVE-2023-0633HIGH7.2ten sam produkt

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege es...