Git-for-windows Git

10 CVEs affecting Git-for-windows Git. Latest disclosed: 2026-04-15. Critical: 0, High: 8.

Top CVEs affecting Git-for-windows Git
CVESeverityScorePublishedSummary
CVE-2023-23618High8.62023-02-14Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially…
CVE-2022-41953High8.62023-01-17Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line…
CVE-2022-31012High8.22022-07-12Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute…
CVE-2023-29011High7.62023-04-25Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to SS…
CVE-2026-32631High7.42026-04-15Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash…
CVE-2025-66413High7.42026-03-10Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious serv…
CVE-2023-29012High7.32023-04-25Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Unc…
CVE-2023-22743High7.32023-02-14Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a s…
CVE-2022-24765Medium6.02022-04-12Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties…
CVE-2023-25815Low3.32023-04-25In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages a…