CVE-2023-0633: In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE
Published Sep 25, 2023
·Updated
In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.
Affected Software
1 affected component
Docker Docker Desktop<4.12.0
Remediation
Information
Update to 4.12.0
Event History
Sep 25, 2023
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-0633?
CVE-2023-0633 is a vulnerability in Docker Desktop on Windows that allows for argument injection to the installer, resulting in local privilege escalation (LPE).
2
Which version of Docker Desktop is affected by CVE-2023-0633?
Docker Desktop versions before 4.12.0 are affected by CVE-2023-0633.
3
How severe is CVE-2023-0633?
CVE-2023-0633 has a severity rating of 7.2 (high).
4
How can I fix CVE-2023-0633?
To fix CVE-2023-0633, update Docker Desktop to version 4.12.0 or later.
5
Where can I find more information about CVE-2023-0633?
More information about CVE-2023-0633 can be found in the Docker Desktop release notes: [link](https://docs.docker.com/desktop/release-notes/#4120).