CVE-2026-100408

In Git for Windows (versions 2.43.0.windows.1 through 2.55.0.windows.3 ), a heap overflow exists in contrib/credential/wincred/git-credential-wincred.c. When erasing a git:* credential that contains a password field, the match_cred_password() function incorrectly calculates the destination capaci...

CVE-2026-100407

In Git for Windows versions 2.44.0.windows.1 through 2.55.0.windows.3 , a heap overflow exists in the git-credential-wincred store operation located in contrib/credential/wincred/git-credential-wincred.c. The vulnerability occurs because _scwprintf() fails to account for the terminating NUL chara...