CVEvulnerability

CVE-2025-23385

7.8 HIGH Published 2025-01-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-114

Description

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Affected configurations

• jetbrains dottrace (< 2024.1.7) • jetbrains dottrace (>= 2024.2 < 2024.2.8) • jetbrains dottrace (>= 2024.3 < 2024.3.4) • jetbrains etw host service (< 16.43) • jetbrains resharper (< 2024.1.7) • jetbrains resharper (>= 2024.2 < 2024.2.8) • jetbrains resharper (>= 2024.3 < 2024.3.4) • jetbrains rider (< 2024.1.7) • jetbrains rider (>= 2024.2.0 < 2024.2.8) • jetbrains rider (>= 2024.3.0 < 2024.3.4)

Related

Weakness · CWE (1)

References