Product by Git-for-windows
Git
11 known vulnerabilities in Git (Git-for-windows), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-41953 | Git clone remote code execution vulnerability in git-for-windows | 8.6 | |
| High | CVE-2026-62960 | Git: Exposure of Sensitive Information to an Unauthorized Actor | 7.4 | |
| High | CVE-2022-24765 | Uncontrolled search for the Git directory in Git for Windows | 6.0 | |
| High | CVE-2026-32631 | Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers | 7.4 | |
| High | CVE-2025-66413 | Git for Windows leaks NTLM hash when cloning from an attacker-controlled server | 7.4 | |
| High | CVE-2023-23618 | gitk can inadvertently call executables in the worktree | 8.6 | |
| High | CVE-2022-31012 | Git for Windows' installer can be tricked into executing an untrusted binary | 8.2 | |
| High | CVE-2023-29011 | Git for Windows's config file of `connect.exe` is susceptible to malicious placing | 7.6 | |
| High | CVE-2023-29012 | Git CMD erroneously executes `doskey.exe` in the current directory, if it exists | 7.3 | |
| Low | CVE-2023-25815 | Git looks for localized messages in the wrong place | 3.3 | |
| High | CVE-2023-22743 | Git for Windows' installer is susceptible to DLL side loading attacks | 7.3 |