Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-23385

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service be

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JetBrains

Description

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JetBrains ReSharper

Default version status: unaffected

  • 2024.3 to < 2024.3.4affected
  • 2024.2 to < 2024.2.8affected
  • 0 to < 2024.1.7affected

JetBrains Rider

Default version status: unaffected

  • 2024.3 to < 2024.3.4affected
  • 2024.2 to < 2024.2.8affected
  • 0 to < 2024.1.7affected

JetBrains dotTrace

Default version status: unaffected

  • 2024.3 to < 2024.3.4affected
  • 2024.2 to < 2024.2.8affected
  • 0 to < 2024.1.7affected

JetBrains ETW Host Service

Default version status: unaffected

  • 0 to < 16.43affected

References