tldrdailynews.com logo

Docker Desktop patch addresses critical security flaws enabling host compromise

1 min read
Source: The Hacker News
Docker Desktop patch addresses critical security flaws enabling host compromise
Photo: The Hacker News
TL;DR

Docker has released version 4.44.3 to fix a critical vulnerability (CVE-2025-9074) in Docker Desktop for Windows and macOS that could allow attackers to escape containers and gain full host access, with a CVSS score of 9.3. The flaw stems from unauthenticated access to the Docker Engine API, enabling malicious containers to compromise the host system, especially on Windows, while Linux remains unaffected.

Topics:technologysecurity#container-escape#cve-2025-9074#docker#docker-desktop#security#security-vulnerability
Share this article
  1. Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3  The Hacker News
  2. Docker Desktop Vulnerability Leads to Host Compromise  SecurityWeek
  3. Critical Docker Desktop flaw lets attackers hijack Windows hosts  BleepingComputer
  4. Docker Desktop bug let containers hop the fence with barely a nudge  theregister.com
  5. Update Docker Desktop: hackers can take over your Windows PC  Cybernews

Want the full story? Read the original reporting

Read on The Hacker News