CVE-2025-23385

State: Published
Severity: 7.8 High
Published: Jan 28, 2025
Updated: Jan 28, 2025
Reserved: Jan 15, 2025

Description

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H	JetBrains

Weaknesses

CWE-114 Process Control

Affected Products

Product	Versions
ReSharperJetBrains	2024.3 to before 2024.3.4Affected 2024.2 to before 2024.2.8Affected before 2024.1.7Affected
RiderJetBrains	2024.3 to before 2024.3.4Affected 2024.2 to before 2024.2.8Affected before 2024.1.7Affected
dotTraceJetBrains	2024.3 to before 2024.3.4Affected 2024.2 to before 2024.2.8Affected before 2024.1.7Affected
ETW Host ServiceJetBrains	before 16.43Affected

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.