Lucene search

K
zdiHashim Jawad (@ihack4falafel)ZDI-22-1046
HistoryAug 04, 2022 - 12:00 a.m.

Docker Desktop Exposed Dangerous Method Local Privilege Escalation Vulnerability

2022-08-0400:00:00
Hashim Jawad (@ihack4falafel)
www.zerodayinitiative.com
15

0.001 Low

EPSS

Percentile

49.0%

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the com.docker.service module. The module exposes a dangerous function to unprivileged users. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

0.001 Low

EPSS

Percentile

49.0%

Related for ZDI-22-1046