7.2Hoch

CVE-2023-0633In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

Docker Inc. Docker Desktop Veröffentlicht: 2023-09-25 18:32 (vor 3 Jahren)

Beschreibung

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

Schwachstellentyp (CWE): CWE-88

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Docker Inc.	Docker Desktop	< 4.12.0

Referenzen und Patches

https://docs.docker.com/desktop/release-notes/#4120 release-notes

CVSS-Score

7.2Hoch

Quelle: Docker · CVSS 3.1

Angriffsvektor: Lokal
Komplexität: Hoch
Rechte erforderlich: Niedrig
Benutzerinteraktion: Erforderlich
Geltungsbereich: Geändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Keine

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.39%

höher als 33 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: total

Zeitverlauf

ID reserviert2023-02-01
Veröffentlicht2023-09-25 18:32
Bei IP-DB eingegangen2026-10-24 23:52
Zuletzt aktualisiert2024-09-24 17:59

Vergeben von (CNA): Docker

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Docker / Moby

4.5Mittel

CVE-2026-121520 vor 4 Tagen

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Mittel

CVE-2026-121522 vor 4 Tagen

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

5.6Mittel

CVE-2026-121541 vor 4 Tagen

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some …

1.8Niedrig

CVE-2026-121542 vor 4 Tagen

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…

7.1Hoch

CVE-2026-121614 vor 4 Tagen

Docker Sandboxes host Git executes repository-controlled programs

Docker Docker Sandboxes

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox w…

7.3Hoch

CVE-2026-93325 vor 4 Tagen

Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Docker Docker Buildx

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.