Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Docker Desktop | — | Upgrade Docker Desktop to the latest version | Nov 3, 2025 | Aug 28, 2019 |
| Docker_ce | — | Upgrade Docker CE to version 2.1.0.1 | Apr 16, 2020 | Aug 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub