CVE-2022-38730

概要

参考情報

• docs.docker.com/desktop/release-notes · Release Notes
• cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-2 · Third Party Advisory

desktop のその他の脆弱性

• CVE-2026-2664高 7.8An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up …
• CVE-2025-3224高 7.8A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to…
• CVE-2024-8696緊急 9.8A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in …
• CVE-2024-8695緊急 9.8A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker D…
• CVE-2024-6222高 7.0In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape…