CVE-2019-15752
KEVDocker Desktop Community Edition Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- Docker
- Product
- Desktop Community Edition
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-732
Description
Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\.
Required action
Apply updates per vendor instructions.