CVE-2025-23385
Published: Jan 28, 2025
Modified: Jan 28, 2025
CVSS v3.1
7.8
Description
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
| Vendor | Product | Versions |
|---|---|---|
JetBrains | ReSharper | affected 2024.3 - < 2024.3.4affected 2024.2 - < 2024.2.8affected 0 - < 2024.1.7 |
JetBrains | Rider | affected 2024.3 - < 2024.3.4affected 2024.2 - < 2024.2.8affected 0 - < 2024.1.7 |
JetBrains | dotTrace | affected 2024.3 - < 2024.3.4affected 2024.2 - < 2024.2.8affected 0 - < 2024.1.7 |
JetBrains | ETW Host Service | affected 0 - < 16.43 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now