CVE-2024-8696: Docker Desktop

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

Affected products

• Docker Desktop: before 4.34.2 (fixed in 4.34.2)

Published 2024-09-12. Last modified 2026-06-17.