Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-9164

Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Docker

Description

Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Docker Docker Desktop

Default version status: unaffected

  • 0 to ≤ 4.48.0affected

References