TI-2026-44986 CVE-2026-62960
Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows
Priority HIGH 66
Git for Windows is the Windows port of Git.
git-for-windows
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
git-for-windows records in CISA KEVNo git-for-windows vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
TI-2025-40849 CVE-2025-66413
Git for Windows leaks NTLM hash when cloning from an attacker-controlled server
Priority HIGH 66
Git for Windows is the Windows port of Git.
TI-2018-07996 CVE-2018-11235 · GHSA-v6w3-vcjx-mwhx
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4…
Priority MEDIUM 64
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur.
Priority MEDIUM 54
Git for Windows is the Windows port of Git.
Priority MEDIUM 50
Git GUI is a convenient graphical tool that comes with Git for Windows.
Priority LOW 39
Git for Windows is the Windows port of the revision control system Git.
TI-2022-13057 CVE-2022-31012
Git for Windows' installer can be tricked into executing an untrusted binary
Priority LOW 38
Git for Windows is a fork of Git that contains Windows-specific patches.
Priority LOW 38
Git for Windows is a fork of Git containing Windows-specific patches.
TI-2023-13473 CVE-2023-29012
Git CMD erroneously executes `doskey.exe` in the current directory, if it exists
Priority LOW 36
Git for Windows is the Windows port of Git.
TI-2023-13472 CVE-2023-29011
Git for Windows's config file of `connect.exe` is susceptible to malicious placing
Priority LOW 36
Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g.
TI-2021-21060 CVE-2021-46101 · GHSA-6gj8-3mp3-2vfr
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
Priority LOW 36
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
Priority LOW 34
Git for Windows is the Windows port of the revision control system Git.
TI-2026-25140 CVE-2026-32631
Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers
Priority LOW 32
Git for Windows is the Windows port of Git.
Priority LOW 19
Git for Windows is the Windows port of Git.
Priority LOW 18
In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer.