git-for-windows

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

git-for-windows records in CISA KEV

No git-for-windows vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Git · all components

TI-2025-40849 CVE-2025-66413

HIGH 66

Git for Windows is the Windows port of Git.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00319 Published 2026-03-10 Fixed in 2.53.0(2) CWE-200

TI-2018-07996 CVE-2018-11235 · GHSA-v6w3-vcjx-mwhx

MEDIUM 64

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.48062 Published 2018-05-30 Partial fix CWE-22

TI-2022-13057 CVE-2022-31012

LOW 38

Git for Windows is a fork of Git that contains Windows-specific patches.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00394 Published 2022-07-12 Fixed in 2.37.1 CWE-426

TI-2021-21060 CVE-2021-46101 · GHSA-6gj8-3mp3-2vfr

LOW 36

In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01403 Published 2022-01-31 No fix listed