CVE-2026-100408

A flaw was found in Git for Windows within the git-credential-wincred credential helper. When erasing stored credentials that include a password, the helper calculates buffer sizes incorrectly for wide characters, resulting in a heap-based buffer overflow. An attacker who supplies crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-100408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager a...

Linux Distros Unpatched Vulnerability : CVE-2026-100407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git- credential-wincred store operation in...

CVE-2026-100408

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

CVE-2026-100407

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

CVE-2026-100408 Git for Windows: git-credential-wincred Erase Path Heap Overflow

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

EUVD-2026-116937

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

CVE-2026-100408 Git for Windows: git-credential-wincred Erase Path Heap Overflow

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

CVE-2026-100408

In Git for Windows (versions 2.43.0.windows.1 through 2.55.0.windows.3 ), a heap overflow exists in contrib/credential/wincred/git-credential-wincred.c. When erasing a git:* credential that contains a password field, the match_cred_password() function incorrectly calculates the destination capaci...

CVE-2026-100407 Git for Windows: git-credential-wincred OAuth Store Heap Overflow

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

CVE-2026-100407 Git for Windows: git-credential-wincred OAuth Store Heap Overflow

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

CVE-2026-100407

In Git for Windows versions 2.44.0.windows.1 through 2.55.0.windows.3 , a heap overflow exists in the git-credential-wincred store operation located in contrib/credential/wincred/git-credential-wincred.c. The vulnerability occurs because _scwprintf() fails to account for the terminating NUL chara...

PT-2026-136994

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

CVE-2026-100407: git-for-windows git: Git for Windows is the Windows port of Git

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

CVE-2026-100407

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

CVE-2026-100408

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

CVE-2026-100408: git-for-windows git: Git for Windows is the Windows port of Git

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

UBUNTU-CVE-2026-100407

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...

UBUNTU-CVE-2026-100408

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git: credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the operation in contrib/credential/wincred/git-credential-wincred.c...

PT-2026-136993

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses scwprintf to size a formatted wide-character credential buffer without space for the terminating NUL whe...