Live › vulnerability › CVE-2019-15752
Go to dashboardDocker Desktop Community Edition on Windows lets a local user escalate privileges by planting a fake docker-credential-wincred.exe in a folder under %PROGRAMDATA%. The attacker gets higher privileges on the machine, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Docker Desktop Community Edition | vendor | – | – |
docker version to confirm the installed Docker Desktop build; compare it with the fixed releaseEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
This page as .md · .json · in your agent: get_signal("CVE-2019-15752")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.