Vulnerabilities > CVE-2023-0627 - Unspecified vulnerability in Docker Desktop 4.11.0/4.11.1

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
docker

Summary

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

Vulnerable Configurations

Part Description Count
Application
Docker
2