CVE-2022-37326: Docker Desktop

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.

Affected products

• Docker Desktop: before 4.6.0 (fixed in 4.6.0)

Published 2023-04-27. Last modified 2026-06-17.