PatchTheCVEgit for windows vulnerabilities and fixes
Recent CVEs affecting git for windows, with upgrade or downgrade steps. 6 tracked.
Also searched as: gitforwindows.
git for windows has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2023-04-25. Highest priority: CVE-2022-24767 (score 51/100).
- CVE-2023-29012 HIGH 7.2 UPGRADE Git for Windows is the Windows port of Git
- CVE-2023-29011 HIGH 7.5 UPGRADE Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SO
- CVE-2023-25815 LOW 3.3 UPGRADE MITIGATE In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer
- CVE-2023-23618 HIGH 8.6 UPGRADE Git for Windows is the Windows port of the revision control system Git
- CVE-2023-22743 HIGH 7.2 UPGRADE Git for Windows is the Windows port of the revision control system Git
- CVE-2022-24767 HIGH 7.8 UPGRADE UPGRADE GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
FAQ
How do I fix git for windows vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is git for windows being exploited right now?
None of the tracked git for windows CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which git for windows CVE should I patch first?
CVE-2022-24767 currently ranks highest (51/100): GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account..