[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwvI-jfXRZ8UuYnoqxBH8KWa7LUKhHPUyQa3SJlFr010":3,"g5a-risk:CVE-2024-6222":133},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":28,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":65,"references":66,"referencesCount":74,"weaknesses":75,"weaknessesCount":29,"isActivelyExploited":56,"cisaInfo":28,"otxData":28,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":128,"notableEvents":129},"CVE-2024-6222","What is CVE-2024-6222?","In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages.\n\nDocker Desktop  v4.29.0 https:\u002F\u002Fdocs.docker.com\u002Fdesktop\u002Frelease-notes\u002F#4290  fixes the issue on MacOS, Linux and Windows with Hyper-V backend.\n\nAs exploitation requires \"Allow only extensions distributed through the Docker Marketplace\" to be disabled, Docker Desktop  v4.31.0 https:\u002F\u002Fdocs.docker.com\u002Fdesktop\u002Frelease-notes\u002F#4310  additionally changes the default configuration to enable this setting by default.","In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by p...","2024-07-09T18:15:12.51","2026-06-17T08:17:32.76",7.3,"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":31,"CVSSMetricV2":32,"CVSSMetricV40":33},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOCAL","HIGH","LOW","NONE","UNCHANGED",7,null,1,5.9,[],[],[34],{"Source":35,"Type":36,"CVSSData":37},"security@docker.com","Secondary",{"Version":38,"VectorString":13,"BaseScore":12,"BaseSeverity":23,"AttackVector":22,"AttackComplexity":24,"AttackRequirements":39,"PrivilegesRequired":23,"UserInteraction":40,"VulnConfidentialityImpact":23,"VulnIntegrityImpact":23,"VulnAvailabilityImpact":23,"SubConfidentialityImpact":23,"SubIntegrityImpact":23,"SubAvailabilityImpact":23,"ExploitMaturity":41,"ConfidentialityRequirement":41,"IntegrityRequirement":41,"AvailabilityRequirement":41,"ModifiedAttackVector":41,"ModifiedAttackComplexity":41,"ModifiedAttackRequirements":41,"ModifiedPrivilegesRequired":41,"ModifiedUserInteraction":41,"ModifiedVulnConfidentialityImpact":41,"ModifiedVulnIntegrityImpact":41,"ModifiedVulnAvailabilityImpact":41,"ModifiedSubConfidentialityImpact":41,"ModifiedSubIntegrityImpact":41,"ModifiedSubAvailabilityImpact":41,"Safety":41,"Automatable":41,"Recovery":41,"ValueDensity":41,"VulnerabilityResponseEffort":41,"ProviderUrgency":41},"4.0","PRESENT","PASSIVE","NOT_DEFINED",0.00557,[42,42,42,42,42,42,42],"High",[46,51,57,61],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"docker","desktop","*","cpe:2.3:a:docker:desktop:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":56},"apple","macos","-","cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",false,{"vendor":58,"product":59,"version":54,"criteria":60,"vulnerable":56},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":54,"criteria":64,"vulnerable":56},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",4,[67,72],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fdocs.docker.com\u002Fdesktop\u002Frelease-notes\u002F#4290","Docker",[71],"Release Notes",{"url":68,"source":69,"tags":73},[71],2,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-923","Improper Restriction of Communication Channel to Intended Endpoints","The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.","Attackers might be able to spoof the intended endpoint from a different system or process, thus gaining the same level of access as the intended endpoint.\nWhile this issue frequently involves authentication between network-based clients and servers, other types of communication channels and endpoints can have this weakness.","Incomplete","Class","Simple",[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2024-6222? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-6222, a high severity cyber security vulnerability from 2024. In Docker Desktop before v4.29.0, an attacker who has gained...","CVE-2024-6222, CVE-2024-6222 vulnerability, CVE-2024-6222 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, docker security, apple security, linux security, microsoft security, desktop vulnerability, macos vulnerability, linux_kernel vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2024-6222",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-6222","Cybersecurity","CVE-2024-6222, CVE-2024-6222 vulnerability, CVE-2024-6222 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":112,"Negate":28,"Nodes":113},"AND",[114,120],{"Operator":115,"Negate":56,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":118,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":119,"VersionEndIncluding":28},"352495C8-4C77-481B-B784-E95A211D9FB9","4.29.0",{"Operator":115,"Negate":56,"CPEMatch":121},[122,124,126],{"Vulnerable":56,"Criteria":55,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"387021A0-AF36-463C-A605-32EA7DAC172E",{"Vulnerable":56,"Criteria":60,"MatchCriteriaID":125,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":56,"Criteria":64,"MatchCriteriaID":127,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":131,"version":132},1792371041565,"2.0",{"score":134,"band":135,"action":136,"scoredAt":137},45,"Medium","Plan remediation","2026-10-16T07:03:05.102997+00:00"]