CVE-2022-25365: Docker

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.

Affected products

• Docker Docker: before 4.5.1 (fixed in 4.5.1)

Published 2022-02-19. Last modified 2026-06-17.