gitforwindows records
4 published records for vendor gitforwindows.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-426 Untrusted Search Path1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
45Plan | CVE-2018-11235Proof of concept | In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can debian · debian linux · CWE-22 | High7.8 | 47.4%May 30, 2018 |
30Monitor | CVE-2021-46101No exploit | In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.gitforwindows · git | High7.5 | 1.4%Jan 31, 2022 |
29Monitor | CVE-2022-31012No exploit | Git for Windows' installer can be tricked into executing an untrusted binarygitforwindows · git · CWE-426 | High7.3 | 0.4%Jul 12, 2022 |
26Monitor | CVE-2025-66413No exploit | Git for Windows leaks NTLM hash when cloning from an attacker-controlled servergitforwindows · git · CWE-200 | Medium6.5 | 0.3%Mar 10, 2026 |
- CVE-2018-1123545Plan
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can
HighCVSS 7.8Proof of conceptEPSS 47%debian · debian linuxMay 30, 2018
- CVE-2021-4610130Monitor
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
HighCVSS 7.5No exploitEPSS 1%gitforwindows · gitJan 31, 2022
- CVE-2022-3101229Monitor
Git for Windows' installer can be tricked into executing an untrusted binary
HighCVSS 7.3No exploitEPSS 0%gitforwindows · gitJul 12, 2022
- CVE-2025-6641326Monitor
Git for Windows leaks NTLM hash when cloning from an attacker-controlled server
MediumCVSS 6.5No exploitEPSS 0%gitforwindows · gitMar 10, 2026