A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must clone a file using a specially crafted path on a vulnerable system. The security update fixes the vulnerability by ensuring Git for Visual Studio properly handles folder paths.

@CTurtE ) and Nicolas Joly (@n_joly) of Microsoft Corporation