CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Score

CVSS 3.1 7.8 High

Status

Modified - security-advisories@github.com

Published

2022-04-12

Last modified

2024-10-01

Weaknesses

CWE-427

Affected products

• Git For Windows (Git For Windows Project)
• Microsoft Visual Studio 2017 Version 15.9 Includes 15.0 - 15.8 (Microsoft)
• Microsoft Visual Studio 2019 Version 16.11 Includes 16.0 - 16.10 (Microsoft)
• Microsoft Visual Studio 2019 Version 16.7 Includes 16.0 16.6 (Microsoft)
• Microsoft Visual Studio 2019 Version 16.9 Includes 16.0 - 16.8 (Microsoft)
• Microsoft Visual Studio 2022 Version 17.0 (Microsoft)
• Microsoft Visual Studio 2022 Version 17.1 (Microsoft)
• Visual Studio 2017 (Microsoft)
• Visual Studio 2019 (Microsoft)
• Visual Studio 2022 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24767