CVE-2022-37326 | BDVDB-2026-201080 Detail

Description#

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-27Record published in the CVE List.
2. Version 22025-01-31Most recent update recorded in the CVE List.