Vulnerabilities > Docker > Desktop > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-09-12 CVE-2024-8696 Unspecified vulnerability in Docker Desktop
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
network
low complexity
docker
critical
9.8
2024-09-12 CVE-2024-8695 Unspecified vulnerability in Docker Desktop
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
network
low complexity
docker
critical
9.8