CVE-2023-0627

Published: Sep 25, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

Affected (1)

Products: Docker: Docker Desktop

Docker

1 product

Docker Desktop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Docker Docker Desktop	From 4.11.0 to 4.12.0

Related CWEs

CWE-501

Trust Boundary Violation

The product mixes trusted and untrusted data in the same data structure or structured message.

References (2)

https://docs.docker.com/desktop/release-notes/#4120

Source: security@docker.com

Release NotesVendor Advisory

https://docs.docker.com/desktop/release-notes/#4120

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.