diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index 1b9aa18c95ef..8d9fa184a84d 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -31,6 +31,20 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo > > If you're experiencing malware detection issues on Mac, follow the steps documented in [docker/for-mac#7527](https://github.com/docker/for-mac/issues/7527). +## 4.44.3 + +{{< release-date date="2025-08-20" >}} + +{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.2" build_path="/202357/" >}} + +### Security + +- Fixed CVE-2025-9074 where a malicious container running on Docker Desktop could access the Docker Engine and launch additional containers without requiring the Docker socket to be mounted. This could allow unauthorized access to user files on the host system. Enhanced Container Isolation (ECI) does not mitigate this vulnerability. + +### Bug fixes and enhancements + +- Fixed a bug which caused the Docker Offload dialog to block users from accessing the dashboard. + ## 4.44.2 {{< release-date date="2025-08-15" >}} diff --git a/content/manuals/security/security-announcements.md b/content/manuals/security/security-announcements.md index 2150af089bc4..a6a61f98af4d 100644 --- a/content/manuals/security/security-announcements.md +++ b/content/manuals/security/security-announcements.md @@ -8,6 +8,15 @@ toc_min: 1 toc_max: 2 --- +## Docker Desktop 4.44.3 security update: CVE-2025-9074 + +_Last updated August 20, 2025_ + +A vulnerability in Docker Desktop was fixed on July 03 in the [4.44.3](/manuals/desktop/release-notes.md#4443) release: + +- Fixed CVE-2025-9074 where a malicious container running on Docker Desktop could access the Docker Engine and launch additional containers without requiring the Docker socket to be mounted. This could allow unauthorized access to user files on the host system. Enhanced Container Isolation (ECI) does not mitigate this vulnerability. + + ## Docker Desktop 4.44.0 security update: CVE-2025-23266 _Last updated July 31, 2025_