GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

An update of the git package has been released.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513, CVE-2022-24765, CVE-2021-43877)

  - A DLL hijacking vulnerability. An authenticated attacker can exploit this to execute arbitrary code.     (CVE-2022-24767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
333673	Photon OS 5.0: Git PHSA-2025-5.0-91-0590	Nessus	PhotonOS Local Security Checks	Local	low
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	Local	critical
159733	Security Updates for Microsoft Visual Studio Products (April 2022)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2022-24767

high

Tenable Plugins

low

critical

high