CVE-2024-8696

Published: Sep 12, 2024

Modified: Sep 12, 2024

PUBLISHED

Description

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

Vendor	Product	Versions
Docker	Docker Desktop	affected `0 - < 4.34.2`

Weaknesses (CWE)

CWE-79

CWE-94

References

https://docs.docker.com/desktop/release-notes/#4342

release-notes

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-8696

Description

Affected Products

Weaknesses (CWE)

References