CVE-2026-100408

A flaw was found in Git for Windows within the git-credential-wincred credential helper. When erasing stored credentials that include a password, the helper calculates buffer sizes incorrectly for wide characters, resulting in a heap-based buffer overflow. An attacker who supplies crafted...