diff --git a/content/desktop/release-notes.md b/content/desktop/release-notes.md index 2bfa461bbc..4d7889542d 100644 --- a/content/desktop/release-notes.md +++ b/content/desktop/release-notes.md @@ -338,7 +338,8 @@ This can be resolved by adding the user to the **docker-users** group. Before st #### Security -- Disabled Electron `runAsNode` fuse to improve security hardening. For more info, see [Electron's documentation.](https://www.electronjs.org/blog/statement-run-as-node-cves) +- Disabled Electron `runAsNode` fuse to improve security hardening. For more info, see [Electron's documentation.](https://www.electronjs.org/blog/statement-run-as-node-cves). +- Fixed [CVE-2024-6222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6222) which allows an attacker who has gained access to the Docker Desktop VM through a container breakout to further escape to the host by passing extensions and dashboard related IPC messages. Reported by Billy Jheng Bing-Jhong, Đỗ Minh Tuấn, Muhammad Alifa Ramdhan working with Trend Micro Zero Day Initiative. ### Known issues