Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions content/manuals/desktop/release-notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,20 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo
>
> If you're experiencing malware detection issues on Mac, follow the steps documented in [docker/for-mac#7527](https://github.com/docker/for-mac/issues/7527).

## 4.44.3

{{< release-date date="2025-08-20" >}}

{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.2" build_path="/202357/" >}}

### Security

- Fixed CVE-2025-9074 where a malicious container running on Docker Desktop could access the Docker Engine and launch additional containers without requiring the Docker socket to be mounted. This could allow unauthorized access to user files on the host system. Enhanced Container Isolation (ECI) does not mitigate this vulnerability.

### Bug fixes and enhancements

- Fixed a bug which caused the Docker Offload dialog to block users from accessing the dashboard.

## 4.44.2

{{< release-date date="2025-08-15" >}}
Expand Down
9 changes: 9 additions & 0 deletions content/manuals/security/security-announcements.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,15 @@ toc_min: 1
toc_max: 2
---

## Docker Desktop 4.44.3 security update: CVE-2025-9074

_Last updated August 20, 2025_

A vulnerability in Docker Desktop was fixed on July 03 in the [4.44.3](/manuals/desktop/release-notes.md#4443) release:

- Fixed CVE-2025-9074 where a malicious container running on Docker Desktop could access the Docker Engine and launch additional containers without requiring the Docker socket to be mounted. This could allow unauthorized access to user files on the host system. Enhanced Container Isolation (ECI) does not mitigate this vulnerability.


## Docker Desktop 4.44.0 security update: CVE-2025-23266

_Last updated July 31, 2025_
Expand Down