Docker Desktop 4.11.x allows –no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.
Weakness
The product mixes trusted and untrusted data in the same data structure or structured message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Docker_desktop | Docker | 4.11.0 (including) | 4.12.0 (excluding) |