CVE-2025-9164: Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9164?
CVE-2025-9164 has a high severity rating due to its potential for local privilege escalation.
How do I fix CVE-2025-9164?
To fix CVE-2025-9164, update to the latest version of Docker Desktop that addresses this DLL hijacking vulnerability.
What causes CVE-2025-9164?
CVE-2025-9164 is caused by an insecure DLL search order in the Docker Desktop Installer.exe.
Who is affected by CVE-2025-9164?
Users of Docker Desktop version 4.48.0 and earlier are affected by CVE-2025-9164.
What are the potential impacts of CVE-2025-9164?
The potential impact of CVE-2025-9164 includes local privilege escalation, allowing attackers to execute malicious code with elevated permissions.