Git-For-Windows
10 CVEs across 1 Git-For-Windows products. Browse Git-For-Windows vulnerabilities, severities, and proof-of-concept exploits.
Git-For-Windows products with known CVEs
Git-For-Windows CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-32631 | High | 7.4 | 2026-04-15 | Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash… |
CVE-2025-66413 | High | 7.4 | 2026-03-10 | Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious serv… |
CVE-2023-29012 | High | 7.2 | 2023-04-25 | Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Unc… |
CVE-2023-29011 | High | 7.5 | 2023-04-25 | Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to SS… |
CVE-2023-25815 | Low | 3.3 | 2023-04-25 | In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages a… |
CVE-2023-23618 | High | 8.6 | 2023-02-14 | Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially… |
CVE-2023-22743 | High | 7.2 | 2023-02-14 | Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a s… |
CVE-2022-41953 | High | 8.6 | 2023-01-17 | Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line… |
CVE-2022-31012 | High | 8.2 | 2022-07-12 | Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute… |
CVE-2022-24765 | Medium | 6.0 | 2022-04-12 | Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties… |