Vulnerabilities

TI-2025-40849 CVE-2025-66413

Git for Windows leaks NTLM hash when cloning from an attacker-controlled server

HIGH 66

Git for Windows is the Windows port of Git.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00319 Published 2026-03-10 Fixed in 2.53.0(2) CWE-200

TI-2022-13057 CVE-2022-31012

LOW 38

Git for Windows is a fork of Git that contains Windows-specific patches.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00394 Published 2022-07-12 Fixed in 2.37.1 CWE-426

TI-2021-21060 CVE-2021-46101 · GHSA-6gj8-3mp3-2vfr

LOW 36

In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01403 Published 2022-01-31 No fix listed

TI-2018-07996 CVE-2018-11235 · GHSA-v6w3-vcjx-mwhx

MEDIUM 64

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.48062 Published 2018-05-30 Partial fix CWE-22