Git
Vendor:
First CVE: May 30, 2018 · Active for 8 years
4
Total CVEs
More Total CVEs than 72% of tracked products
1.3
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 46% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Git over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 30, 2018
8 years ago
Most Recent CVE
Mar 10, 2026
136 days ago
CVE Severity & Scoring
Git4 CVEs
25%
75%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (50.0%)
Network2 (50.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (25.0%)
Unknown0 (0.0%)
Required3 (75.0%)
Privileges Required
Low1 (25.0%)
High0 (0.0%)
None3 (75.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-11235HIGH In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, | May 30, 2018 | 7.8 | 53 | NO | NO |
CVE-2021-46101HIGH In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly. | Jan 31, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-31012HIGH Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into `C:\mi | Jul 12, 2022 | 7.3 | 23 | NO | NO |
CVE-2025-66413MEDIUM Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashin | Mar 10, 2026 | 6.5 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Git
Top CWEs
Versions
No cataloged versions.