Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2024-8695

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Docker

Description

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Docker Docker Desktop

Default version status: unaffected

  • 0 to < 4.34.2affected

References