CNNVD-202602-718 Information
CNNVD ID
CNNVD-202602-718
Related CVE
- CNNVD Published: 2026-02-04
Description (Chinese)
Docker Desktop是美国Docker公司的一个基于容器技术的用于轻量化部署应用的桌面软件。该产品可提供桌面环境可支持在Linux/Windows/Mac OS系统上创建一个容器（轻量级虚拟机）并部署和运行应用程序，以及通过配置文件实现应用程序的自动化安装、部署和升级。 Docker Desktop存在安全漏洞，该漏洞源于安装程序处理C:ProgramDataDockerDesktop目录时存在多个权限分配不当问题，可能导致任意代码执行。
Description (English)
Docker Desktop is a container-based desktop software for light-quantitative deployment applications of the United States company Docker. The product provides a desktop environment that supports the creation of a container (lightweight virtual machine) on the Linux/Windows/Mac OS system and the deployment and operation of applications, as well as the automated installation, deployment and upgrading of applications through configuration files. There is a security loophole in Docker Desktop, which stems from the multiple misallocation of privileges in the installation program for the C:ProgramDataDockerDesktop directory, which may lead to arbitrary code enforcement.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Docker
Published
2026-02-04
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-CAN-28542/ https://docs.docker.com/security/ https://www.zerodayinitiative.com/advisories/ZDI-CAN-28190/ https://access.redhat.com/security/cve/cve-2025-14740