git-for-windows

Products

Exploited and recent CVEs

• CVE-2026-100408 Medium 4.4 Git for Windows: git-credential-wincred Erase Path Heap Overflow 0.1%
• CVE-2026-100407 Medium 4.4 Git for Windows: git-credential-wincred OAuth Store Heap Overflow 0.1%
• CVE-2026-62960 High 7.4 Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows 0.5%
• CVE-2026-32631 High 7.4 Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers 0.3%
• CVE-2025-66413 High 7.4 Git for Windows leaks NTLM hash when cloning from an attacker-controlled server 0.3%
• CVE-2023-29012 High 7.3 Git CMD erroneously executes `doskey.exe` in the current directory, if it exists 0.4%
• CVE-2023-29011 High 7.6 Git for Windows's config file of `connect.exe` is susceptible to malicious placing 0.4%
• CVE-2023-25815 Low 3.3 Git looks for localized messages in the wrong place 0.8%
• CVE-2023-22743 High 7.3 Git for Windows' installer is susceptible to DLL side loading attacks 0.4%
• CVE-2023-23618 High 8.6 gitk can inadvertently call executables in the worktree 0.4%
• CVE-2022-41953 High 8.6 Git clone remote code execution vulnerability in git-for-windows 8.0%
• CVE-2022-31012 High 8.2 Git for Windows' installer can be tricked into executing an untrusted binary 0.4%
• CVE-2022-24765 Medium 6.0 Uncontrolled search for the Git directory in Git for Windows 1.0%