← Database

CVE-2024-8696

CRITICAL CVSS: 9.8 Published: 2024-09-12 Modified: 2026-06-17

Description

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

Affected Platforms

Docker Desktop

Weakness Type

CWE-79, CWE-94, NVD-CWE-noinfo

References