CVE-2025-9164
Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.
| CWE | CWE-427 |
| Vendor | docker |
| Product | docker desktop |
| Ecosystems | |
| Industries | Technology |
| Published | Oct 27, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for docker docker desktop
Be the first to know when new unknown vulnerabilities affecting docker docker desktop are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Docker / Docker Desktop
0 ≤ 4.48.0
References
Credits
Mahmoud NourEldin