CNNVD-202601-3384 Information
Jan 21, 2026
cve
CNNVD ID
CNNVD-202601-3384
Related CVE
- CNNVD Published: 2026-01-21
Description (Chinese)
Microsoft VFS for Git是美国Microsoft公司的一个Git优化系统。 Microsoft VFS for Git 1.0.21014.1版本存在代码问题漏洞，该漏洞源于GVFS.Service Windows服务存在未加引号的服务路径，可能导致本地攻击者执行代码并提升权限。
Description (English)
Microsoft VFS for Git is a Git optimization system of Microsoft USA. Microsoft VFS for Git 1.001014.1 has a code gap, which stems from the existence of unquoted service paths for the GVFS. Service Windows service, which may lead to local assailants to enforce codes and upgrade privileges.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
微软
Published
2026-01-21
Last Modified
2026-02-24
References
https://vfsforgit.org/ https://www.exploit-db.com/exploits/49661 https://www.vulncheck.com/advisories/vfs-for-git-gvfsservice-unquoted-service-path
Share on: