目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Docker Inc. 厂商漏洞列表 / CVE 中文分析 11

Docker Inc. 厂商相关 11 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Docker Inc. 主要开发容器化平台 Docker，用于简化应用部署和环境一致性。历史上常见漏洞包括容器逃逸、权限提升和远程代码执行，多涉及容器运行时和镜像管理组件。2019 年曾曝出严重漏洞，允许攻击者通过特制镜像获取宿主机 root 权限。尽管已修复 11 个 CVE，容器安全仍需关注镜像来源验证和最小权限原则。

上位製品 Docker Inc.: Docker Desktop
CVE IDタイトルCVSS深刻度公開日
CVE-2025-14740 Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerabilities — Docker DesktopCWE-732 6.7 Medium2026-02-04
CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages — Docker DesktopCWE-923 7.8AIHighAI2024-07-09
CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode — Docker Desktop 6.1 Medium2024-07-09
CVE-2023-0633 In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE — Docker DesktopCWE-88 7.2 High2023-09-25
CVE-2023-0627 Docker Desktop 4.11.x allows --no-windows-containers flag bypass — Docker DesktopCWE-501 6.7 Medium2023-09-25
CVE-2023-0626 Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route — Docker DesktopCWE-94 8.0 High2023-09-25
CVE-2023-0625 Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog — Docker DesktopCWE-79 8.0 High2023-09-25
CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL — Docker DesktopCWE-200 8.0 High2023-09-25
CVE-2023-5165 Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell — Docker DesktopCWE-862 7.1 High2023-09-25
CVE-2023-0629 Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers — Docker DesktopCWE-424 7.1 High2023-03-13
CVE-2023-0628 Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL — Docker DesktopCWE-77 6.1 Medium2023-03-13

本页汇总了 Docker Inc. 厂商截至目前公开的全部 11 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。