BaseFortify

Publication date: 2025-10-27

Last updated on: 2025-10-30

Assigner: Docker Inc.

Description

Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-27

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9164

Affected Vendors & Products

Vendor	Product	Version / Range
docker	docker_desktop	4.48.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is a DLL hijacking issue in Docker Desktop Installer.exe caused by an insecure DLL search order. The installer looks for required DLL files in the user's Downloads folder before checking system directories. This allows an attacker with local access to place a malicious DLL in the Downloads folder, which the installer may load, leading to local privilege escalation.

Impact Analysis

The vulnerability can allow a local attacker to escalate their privileges on the affected system by placing a malicious DLL in the user's Downloads folder. This could lead to unauthorized actions being performed with higher privileges than intended, potentially compromising system security.

Hi! I’m here to help you understand CVE-2025-9164. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70