CVE-2023-0628: Docker Desktop

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

Affected products

• Docker Docker Desktop: before 4.17.0 (fixed in 4.17.0)

Published 2023-03-13. Last modified 2026-06-17.