critical9.8
CVE-2024-8695
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.…
Impact
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docker | Desktop | before 4.34.2 |