CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2025-23385
https://notcve.org/view.php?id=CVE-2025-23385
28 Jan 2025 — In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-114: Process Control •
CVSS: 7.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-16407
https://notcve.org/view.php?id=CVE-2019-16407
02 Oct 2019 — JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability. Los instaladores de JetBrains ReSharper para versiones anteriores a 2019.2, presentaban una vulnerabilidad de Secuestro de DLL. • https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 • CWE-427: Uncontrolled Search Path Element •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-14878
https://notcve.org/view.php?id=CVE-2018-14878
13 Aug 2018 — JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data. JetBrains dotPeek en versiones anteriores a 2018.2 y ReSharper Ultimate en versiones anteriores a 2018.1.4 permiten que los atacantes ejecuten código descompilando un objeto .NET compilado (como un archivo DLL o EXE) con un archivo específico por una deserialización de datos... • https://blog.jetbrains.com/dotnet/2018/08/02/resharper-ultimate-2018-1-4-rider-2018-1-4-released • CWE-502: Deserialization of Untrusted Data •