critical9.8
CVE-2024-8696
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop befo…
Impact
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docker | Desktop | before 4.34.2 |