CVE-2025-9164 HIGH

CVE-2025-9164: Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows

Vendor Docker
Product Docker Desktop
Weakness CWE-427
Published October 27, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:C

What the vulnerability does

01Description

Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.

Key dates

02Disclosure timeline

October 27, 2025 CVE published
February 26, 2026 Record updated