CVE-2025-23385

7.8 highEPSS 0.1%

High (7.8) in jetbrains. EPSS 0.1% chance of exploitation in the next 30 days.

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-114
Published: 2025-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jetbrains:dottrace
jetbrains:etw_host_service
jetbrains:resharper
jetbrains:rider

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Check your stack JSON