Git for Windows uninstaller is vulnerable to DLL hijacking when run under the SYSTEM user account
Git has released a new verson to address some security vulnerabilities, As reported, we are aware that GitHub is affected. But there is a need to upgrade your local installation of Git, especifially when you are using Git on Windows or on multi-user machines. All credit goes to to äæęØäø, and the fix was authored by Johannes Schindelin.Ā CVE-2022-24765As stated in thisĀ article, this vulnerability affects multi-user machines, Git users might find themselves unexpectedly in aĀ Git worktree, e.g. when another user created a repository inĀ C:\.git, in a mounted network drive or in a scratch space. Merely having a Git-aware prompt that runsĀ git statusĀ (orĀ git diff) and navigate to a directory that is supposedly not aĀ Git worktree, or open such a directory in an editor or IDE such as V
