CVE-2023-0625

HIGH

Docker Desktop < 4.12.0 - Remote Code Execution via Extension Description or Changelog

Title source: llm

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0.

Core 1

Core References

Release Notes, Vendor Advisory release-notes

CVSS v3 8.0

EPSS 0.0074

EPSS Percentile 49.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-94 CWE-829 CWE-79

Status published

Products (1)

docker/docker_desktop < 4.12.0

Published Sep 25, 2023

Tracked Since Feb 18, 2026