2025年8月26日星期二

Docker Desktop Security Restriction Bypass Vulnerability

Docker Desktop Security Restriction Bypass Vulnerability

Release Date: 26 Aug 2025

RISK: High Risk

TYPE: Operating Systems - Networks OS

A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

 

Note:

Proof of Concept exploit code is publicly available for CVE-2025-9074. The vulnerability may allow unauthorized access to user files on the host system. Hence, the risk level is rated as High Risk.


Impact

  • Security Restriction Bypass

System / Technologies affected

  • Docker Desktop on Windows below version 4.44.3
  • Docker Desktop on MacOS below version 4.44.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

蘋果產品多個漏洞

蘋果產品多個漏洞 發佈日期: 2025年12月15日 風險: 極高度風險 類型: 操作系統 - 流動裝置及操作系統 於蘋果產品發現多個漏洞。遠端...