CVE-2019-15752 - CVE House
Back to Database
Status published Unknown CVE-2019-15752

Docker Desktop Community Edition before 2.1.0.1 allows local users to...

Vulnerability Description

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15752

Credits & Attribution

No credits recorded in the NVD database.

References

More from docker

View All →
CVE-2025-64443
DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
High 7.3
CVE-2025-62725
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
High 8.9
CVE-2025-0495
Secrets leakage to telemetry endpoint via cache backend configuration via buildx
Medium 4.1
CVE-2022-38730
Docker Desktop for Windows before 4.6 allows attackers to overwrite...
Unknown 0
CVE-2022-37326
Docker Desktop for Windows before 4.6.0 allows attackers to delete...
Unknown 0

Affected Vendor

Affected Software

docker, geode
Vulnerable Versions:
0, 1.12.0

Timeline

Official Publish: August 28th, 2019
Last Modified: October 21st, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.