What’s Vulnerable › Products
git-for-windows git vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your git-for-windows git version is affected
Latest git-for-windows git vulnerabilities
- CVE-2026-62960 — Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows (CVSS 7.4)
- CVE-2026-32631 — Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers (CVSS 7.4)
- CVE-2023-29012 — Git CMD erroneously executes `doskey.exe` in the current directory, if it exists (CVSS 7.8)
- CVE-2023-29011 — Git for Windows's config file of `connect.exe` is susceptible to malicious placing (CVSS 7.8)
- CVE-2023-25815 — Git looks for localized messages in the wrong place (CVSS 2.2)
- CVE-2023-23618 — gitk can inadvertently call executables in the worktree (CVSS 7.8)
- CVE-2023-22743 — Git for Windows' installer is susceptible to DLL side loading attacks (CVSS 7.3)
- CVE-2022-24767 — (CVSS 7.8)
- CVE-2016-9274 — (CVSS 7.8)