Git For Windows Project - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2023-04-25.

Products

CVE-2023-29012 - CVSS 7.8 (high), 2023-04-25: Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an…
CVE-2023-29011 - CVSS 7.8 (high), 2023-04-25: Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to…
CVE-2023-25815 - CVSS 3.3 (low), 2023-04-25: In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages…
CVE-2023-23618 - CVSS 8.6 (high), 2023-02-14: Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially…
CVE-2023-22743 - CVSS 7.3 (high), 2023-02-14: Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a…
CVE-2022-24767 - CVSS 7.8 (high), 2022-04-12: GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
CVE-2016-9274 - CVSS 7.8 (high), 2016-11-11: Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working…