CVE-2025-64457
Published Nov 10, 2025In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
Vendor/product archive
jetbrains / rider CVEs
Beta · best-effort8 CVEs tagged to jetbrains / rider — 1 Critical, 3 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2025-43016
Published Apr 25, 2025In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
CVE-2025-23385
Published Jan 28, 2025In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service b…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-37051
Published Jun 10, 2024GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;…
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2024-24939
Published Feb 6, 2024In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible
CVE-2022-37396
Published Aug 3, 2022In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVE-2020-7906
Published Jan 30, 2020In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
CVE-2019-14960
Published Oct 1, 2019JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.
Showing 1-8 of 8 CVEsPage 1 of 1