Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

desktop

Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.

CVE-2025-9164 is a vulnerability classified under CWE-427 (Uncontrolled Search Path Element) affecting Docker Desktop Installer.exe up to version 4.48.0. The core issue lies in the insecure DLL search order employed by the installer on Windows platforms. Specifically, the installer searches for required DLLs starting in the user's Downloads folder before checking trusted system directories. This behavior allows an attacker with local access and write permissions to the Downloads folder to place a malicious DLL with the same name as a legitimate required DLL. When the installer runs, it loads the malicious DLL instead of the legitimate one, leading to arbitrary code execution within the installer process context. Because the installer typically runs with elevated privileges, this can result in local privilege escalation. The vulnerability requires local access and some level of user privileges but does not require user interaction beyond running the installer. The CVSS 4.0 score of 8.8 reflects the high impact on confidentiality, integrity, and availability, combined with the complexity of attack and privilege requirements. No public exploits have been reported yet, but the vulnerability poses a significant risk in environments where users have write access to their Downloads folder and run Docker Desktop installers. The issue is particularly relevant for organizations heavily reliant on containerized development and deployment workflows on Windows systems. Docker has acknowledged the vulnerability but has not yet released a patch at the time of publication.

Detailed information about CVE-2025-9164: CWE-427 Uncontrolled Search Path Element in Docker Docker Desktop affecting Docker Docker Desktop. Get real-time updat

CVE-2025-9164: CWE-427 Uncontrolled Search Path Element in Docker Docker Desktop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9164: CWE-427 Uncontrolled Search Path Element in Docker Docker Desktop

Threats Tagged 'cve-2025-9164'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9164'

Lead Pen Test Professional