CVE-2019-15752
Docker Desktop Community Edition Privilege Escalation Vulnerability
CVSS
—
No CVSS
EPSS
29.6%
p98
KEV
YES
Nov 3, 2021
Exploit Today
79
0-100
Published: — · Last modified: —
29.6%EPSS · 30 days29.6%
2026-06-302026-07-16
Product
Docker / Desktop Community Edition
Vulnerability
Docker Desktop Community Edition Privilege Escalation Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-15752
No related CVEs by CWE or product.