Docker Desktop Community Edition Privilege Escalation Vulnerability
Docker · Desktop Community Edition
Date added (CISA)
2021-11-03
Remediation due
2022-05-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\.