VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-24767

CVE-2022-24767

Description

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Affected products

11
  • Git For Windows/Git For Windows
    cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*
    Range: <2.35.2
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
    Range: >=15.0,<15.9.46
  • Microsoft/Visual Studio2 versions
    cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<16.7.27
    • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*range: >=17.0,<17.0.8
  • Microsoft/Git for Windowsllm-create
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2022 version 17.0v5
    Range: unspecified
  • Microsoft/Microsoft Visual Studio 2022 version 17.1v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.