Vulnerabilities > Docker > Desktop > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-04-27 CVE-2022-38730 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Docker Desktop
Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the DaemonJSON field in the WindowsContainerStartRequest class.
local
high complexity
docker CWE-367
6.3
6.3
2021-08-12 CVE-2021-37841 Incorrect Permission Assignment for Critical Resource vulnerability in Docker Desktop
Docker Desktop before 3.6.0 suffers from incorrect access control.
local
low complexity
docker CWE-732
4.6
4.6