- Known vulnerabilities
- 41
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 9.8
1 total (history)
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2025
Test a different version
| CVE |
|---|
|
CVE-2025-48384
Fixed
HIGH 8.0
KEV
Network Fixed in: 2.50.1
|
|
CVE-2023-23946
Fixed
HIGH 6.2
Local Fixed in: 2.39.2
|
|
CVE-2023-22490
Fixed
HIGH 5.5
Local Fixed in: 2.39.2
|
|
CVE-2022-41953
Fixed
HIGH 7.8
Local Fixed in: 2.39.1
|
|
CVE-2022-29187
Fixed
HIGH 7.8
Local Fixed in: 2.37.1
|
|
CVE-2022-24765
Fixed
HIGH 6.0
Local Fixed in: 2.35.2
|
|
CVE-2022-24975
Fixed
HIGH 7.5
Network Fixed in: > 2.35.1
|
|
CVE-2021-40330
Fixed
HIGH 7.5
Network Fixed in: 2.30.1
|
|
CVE-2020-11008
Fixed
MEDIUM 4.0
Network Fixed in: 2.26.2
|
|
CVE-2020-5260
Fixed
CRITICAL 9.3
Network Fixed in: 2.26.1
|
|
CVE-2014-9390
Fixed
CRITICAL 9.8
Network Fixed in: 2.2.1
|
|
CVE-2019-1353
Fixed
CRITICAL 9.8
Network Fixed in: 2.24.1
|
|
CVE-2019-1348
Fixed
LOW 3.3
Local Fixed in: 2.24.1
|
|
CVE-2019-19604
Fixed
HIGH 7.8
Local Fixed in: 2.24.1
|
|
CVE-2018-19486
Fixed
CRITICAL 9.8
Network Fixed in: 2.19.2
|
|
CVE-2018-17456
Fixed
CRITICAL 9.8
Network Fixed in: 2.19.1
|
|
CVE-2018-1000021
Fixed
MEDIUM 5.0
Network Fixed in: > 2.15.1
|
|
CVE-2017-15298
Fixed
MEDIUM 5.5
Local Fixed in: > 2.14.2
|
|
CVE-2014-9938
Fixed
HIGH 8.8
Network Fixed in: 1.9.3
|
|
CVE-2016-2324
Fixed
CRITICAL 9.8
Network Fixed in: > 2.7.3
|
|
CVE-2013-0308
Fixed
N/A
Fixed in: > 1.8.1.3
|
|
CVE-2010-2542
Fixed
N/A
Fixed in: 1.7.2.1
|
19 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Context
Context
Description
A free and open source distributed version control system
FAQ
FAQ: Git
Does Git have known security vulnerabilities?
Git (winget:Git.Git) on Windows has 41 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Git affected by any open CVE?
Version PreRelease of Git on Windows has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Git affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Git (winget:Git.Git) is currently in the CISA KEV catalog.
What is the latest known version of Git?
The most recent version of Git (winget:Git.Git) tracked by Appaloosa Scout is PreRelease, published by The Git Development Community.