2025年8月26日星期二

Docker Desktop Security Restriction Bypass Vulnerability

Docker Desktop Security Restriction Bypass Vulnerability

Release Date: 26 Aug 2025

RISK: High Risk

TYPE: Operating Systems - Networks OS

A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

 

Note:

Proof of Concept exploit code is publicly available for CVE-2025-9074. The vulnerability may allow unauthorized access to user files on the host system. Hence, the risk level is rated as High Risk.


Impact

  • Security Restriction Bypass

System / Technologies affected

  • Docker Desktop on Windows below version 4.44.3
  • Docker Desktop on MacOS below version 4.44.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

Citrix 產品多個漏洞

Citrix 產品多個漏洞 發佈日期: 2025年08月27日 風險: 高度風險 類型: 操作系統 - Network 於 Citrix 產品發...