https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:09:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05276 bdu:2024-05276 https://cve.radiocsirt.org/vuln/bdu:2024-05276 https://cve.radiocsirt.org/vuln/euvd-2026-3305 EUVD-2026-3305 https://cve.radiocsirt.org/vuln/euvd-2026-3305 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6222 <p>In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages.</p> <p>Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the issue on MacOS, Linux and Windows with Hyper-V backend.</p> <p>As exploitation requires &#34;Allow only extensions distributed through the Docker Marketplace&#34; to be disabled, Docker Desktop  v4.31.0 https://docs.docker.com/desktop/release-notes/#4310  additionally changes the default configuration to enable this setting by default.</p> <p>In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages.</p> <p>Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the issue on MacOS, Linux and Windows with Hyper-V backend.</p> <p>As exploitation requires &#34;Allow only extensions distributed through the Docker Marketplace&#34; to be disabled, Docker Desktop  v4.31.0 https://docs.docker.com/desktop/release-notes/#4310  additionally changes the default configuration to enable this setting by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6222 https://cve.radiocsirt.org/vuln/ghsa-77gv-24g3-732h <p>In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages.</p> <p>Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the issue on MacOS, Linux and Windows with Hyper-V backend.</p> <p>As exploitation requires &#34;Allow only extensions distributed through the Docker Marketplace&#34; to be disabled, Docker Desktop  v4.31.0 https://docs.docker.com/desktop/release-notes/#4310  additionally changes the default configuration to enable this setting by default.</p> <p>In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages.</p> <p>Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the issue on MacOS, Linux and Windows with Hyper-V backend.</p> <p>As exploitation requires &#34;Allow only extensions distributed through the Docker Marketplace&#34; to be disabled, Docker Desktop  v4.31.0 https://docs.docker.com/desktop/release-notes/#4310  additionally changes the default configuration to enable this setting by default.</p> https://cve.radiocsirt.org/vuln/ghsa-77gv-24g3-732h https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1564 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in docker ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in docker ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1564