CVE-2019-15752

A privilege escalation flaw in Docker Desktop Community Edition allowed local users to escalate privileges by placing a trojan horse file in a specific directory.

Local users could escalate privileges by placing a malicious file in a Docker Desktop directory, enabling arbitrary code execution on the host. DIB orgs must ensure Docker Desktop is patched and restricted, as this flaw was actively exploited in the wild and represents a significant supply-chain and unpatched risk.

Shame score — The vulnerability was actively exploited in the wild and allowed privilege escalation, indicating a severe, avoidable failure in Docker's security posture.