Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
CVE-2026-123533
Summary
The vulnerability assigned to this CVE could lead to corruption of guest encrypted memory. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability.
Please see the following for more information:
[https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3016.html]
Products covered
Windows Server 2025 (Server Core installation)
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows Server 2025
Remediation
Install KB5082063. Install KB5083769.
Vendor-listed fixes
10.0.26100.32690
10.0.26200.8246
10.0.26100.8246
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.