CVE-2023-0628

概要

参考情報

• docs.docker.com/desktop/release-notes · Release Notes

docker desktop のその他の脆弱性

• CVE-2026-5843高 8.6The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Pyth…
• CVE-2026-5817高 8.6The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, …
• CVE-2026-6406高 8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker…
• CVE-2025-13743高 7.5Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk…
• CVE-2023-5166中 6.5Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0. …