CVE-2019-15752

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing...

7.8 HighIn KEVPublic exploit

CVE-2019-15752 is a high vulnerability (CVSS 7.8) in Docker Desktop Community Edition, published August 28, 2019. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 48.8%, the 98th percentile. No source names a fixed version.

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

48.8%Down 14.0 points since Apr 14, 2021

What each source reports

NVD Score used 7.8

Record: CVE-2019-15752
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-732
Updated: 2026-11-02

CVE List 7.8

Record: CVE-2019-15752
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-732
Updated: 2026-11-02

EUVDEUVD-2019-6687 7.8

Record: EUVD-2019-6687
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-pg68-prcj-h956 7.8

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing...

Record: GHSA-pg68-prcj-h956
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-732
Updated: 2026-11-02

CISA KEV No score

Docker Desktop Community Edition Privilege Escalation Vulnerability

Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin.

Record: CVE-2019-15752
Weakness: CWE-732
Updated: 2026-11-02

OSV 7.8

Record: CVE-2019-15752
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Docker-Credential-Wincred.exe Privilege Escalation	2019-07-05
Exploit-DB	Docker-Credential-Wincred.exe - Privilege Escalation (Metasploit)	2020-04-28

History

History
When	Changed	Sources
2026-11-03	exploitation, exploits
2026-11-02	created	CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV