CVE-2022-24767: Git For Windows Project Git For Windows

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Affected products

• Git For Windows Project Git For Windows: before 2.35.2 (fixed in 2.35.2)
• Microsoft Visual Studio 2017: from 15.0, before 15.9.46 (fixed in 15.9.46)
• Microsoft Visual Studio 2019: from 16.0, before 16.7.27 (fixed in 16.7.27); from 16.8, before 16.9.19 (fixed in 16.9.19); from 16.10, before 16.11.12 (fixed in 16.11.12)
• Microsoft Visual Studio 2022: from 17.0, before 17.0.8 (fixed in 17.0.8); from 17.1.0, before 17.1.4 (fixed in 17.1.4)

Published 2022-04-12. Last modified 2026-06-17.