Docker — CWE-94

All Frameworks › Docker › CWE-94

4 CVEs categorized as CWE-94 — Code Injection in Docker.

CVE-2024-8696HIGH2024

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

CVE-2024-8695CRITICAL2024

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

CVE-2023-0626HIGH2023

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0.

CVE-2023-0625HIGH2023

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0.