VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 28, 2025· Updated Jun 17, 2026

CVE-2025-23385

CVE-2025-23385

Description

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Affected products

12
  • Jetbrains/dotTrace3 versions
    cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*range: <2024.1.7
    • (no CPE)range: <2024.3.4, <2024.2.8, <2024.1.7
    • (no CPE)range: 2024.3
  • Jetbrains/Etw Host Service3 versions
    cpe:2.3:a:jetbrains:etw_host_service:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:jetbrains:etw_host_service:*:*:*:*:*:*:*:*range: <16.43
    • (no CPE)range: <16.43
    • (no CPE)range: 0
  • Jetbrains/ReSharper3 versions
    cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*range: <2024.1.7
    • (no CPE)range: <2024.3.4, <2024.2.8, <2024.1.7
    • (no CPE)range: 2024.3
  • Jetbrains/Rider3 versions
    cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*range: <2024.1.7
    • (no CPE)range: <2024.3.4, <2024.2.8, <2024.1.7
    • (no CPE)range: 2024.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.