Product by Microsoft

Microsoft Git

41 known vulnerabilities in Microsoft Git (Microsoft), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Microsoft Git (Microsoft)

Critical	CVE-2025-48384	Git allows arbitrary code execution through broken config quoting In CISA KEValso in 4 other products	8.1	08.07.2025
Critical	CVE-2022-23521	gitattributes parsing integer overflow in git also in 3 other products	9.8	17.01.2023
Critical	CVE-2022-41903	Integer overflow in `git archive`, `git log --format` leading to RCE in git also in 3 other products	9.8	17.01.2023
Critical	CVE-2018-17456	Microsoft Git: Remote Code Execution also in 10 other products	9.8	06.10.2018
Critical	CVE-2014-9390	Microsoft Git: security vulnerability also in 4 other products	9.8	12.02.2020
Critical	CVE-2016-2324	Microsoft Git: Heap-Based Buffer Overflow also in 7 other products	9.8	08.04.2016
Critical	CVE-2016-2315	Microsoft Git: Heap-Based Buffer Overflow also in 7 other products	9.8	08.04.2016
High	CVE-2017-1000117	Microsoft Git: security vulnerability	8.8	04.10.2017
High	CVE-2017-14867	Microsoft Git: security vulnerability also in 1 other product	8.8	28.09.2017
High	CVE-2021-21300	malicious repositories can execute remote code while cloning also in 4 other products	8.0	09.03.2021
Critical	CVE-2020-5260	malicious URLs may cause Git to present stored credentials to the wrong server also in 5 other products	9.3	14.04.2020
High	CVE-2023-25652	"git apply --reject" partially-controlled arbitrary file write also in 4 other products	7.5	25.04.2023
High	CVE-2018-11235	Microsoft Git: Path Traversal also in 8 other products	7.8	30.05.2018
High	CVE-2022-41953	Git clone remote code execution vulnerability in git-for-windows also in 1 other product	8.6	17.01.2023
Critical	CVE-2018-19486	Microsoft Git: security vulnerability also in 1 other product	9.8	23.11.2018
High	CVE-2019-1387	Microsoft Git: Remote Code Execution also in 1 other product	8.8	18.12.2019
High	CVE-2022-39260	Git vulnerable to Remote Code Execution via Heap overflow in `git shell` also in 5 other products	8.5	19.10.2022
High	CVE-2023-29007	Arbitrary configuration injection via `git submodule deinit` also in 4 other products	7.0	25.04.2023
Critical	CVE-2019-1353	Microsoft Git: security vulnerability also in 2 other products	9.8	24.01.2020
High	CVE-2018-11233	Microsoft Git: Out-of-Bounds Access also in 1 other product	7.5	30.05.2018
High	CVE-2019-19604	Microsoft Git: security vulnerability also in 3 other products	7.8	10.12.2019
High	CVE-2014-9938	Microsoft Git: Code Execution	8.8	20.03.2017
High	CVE-2021-40330	Microsoft Git: security vulnerability also in 1 other product	7.5	31.08.2021
High	CVE-2022-24975	Microsoft Git: security vulnerability	7.5	11.02.2022
High	CVE-2024-32004	Git vulnerable to Remote Code Execution while cloning special-crafted local repositories also in 4 other products	8.2	14.05.2024

All vulnerabilities in search

All products by Microsoft

Key figures

Vulnerabilities