CVE-2021-3162: 
Docker vulnerability analysis and mitigation

Docker Desktop Community before version 2.5.0.0 on macOS contains a vulnerability related to certificate checking that could lead to local privilege escalation (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 HIGH with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-295 (Improper Certificate Validation) and affects the certificate validation mechanism in Docker Desktop Community on macOS systems (NVD).

The vulnerability could allow an attacker with local access to escalate privileges on the affected system. The high CVSS score indicates that successful exploitation could result in significant impact to confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires local access to the system and low privileges to exploit. No user interaction is needed for exploitation, making it relatively straightforward to exploit if an attacker has the necessary local access (NVD).

Users should upgrade to Docker Desktop Community version 2.5.0.0 or later to address this vulnerability. The fix is included in this version and addresses the certificate checking issues (Docker Release Notes).