Git-for-windows - vulnerabilities (CVEs)

11 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-21.

Products

• Git - 11 CVEs

Newest CVEs of Git-for-windows

• CVE-2026-62960 - CVSS 7.4 (high), 2026-08-21: Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches…
• CVE-2026-32631 - CVSS 7.4 (high), 2026-04-15: Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM…
• CVE-2025-66413 - CVSS 7.4 (high), 2026-03-10: Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious…
• CVE-2023-29012 - CVSS 7.8 (high), 2023-04-25: Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an…
• CVE-2023-29011 - CVSS 7.8 (high), 2023-04-25: Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to…
• CVE-2023-25815 - CVSS 3.3 (low), 2023-04-25: In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages…
• CVE-2023-23618 - CVSS 8.6 (high), 2023-02-14: Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially…
• CVE-2023-22743 - CVSS 7.3 (high), 2023-02-14: Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a…
• CVE-2022-41953 - CVSS 8.6 (high), 2023-01-17: Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line.…
• CVE-2022-31012 - CVSS 8.2 (high), 2022-07-12: Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer…
• CVE-2022-24765 - CVSS 7.8 (high), 2022-04-12: Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties…