Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-0633

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Docker

Description

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Docker Inc. Docker Desktop

Default version status: unaffected

  • 0 to < 4.12.0affected

References