CVE-2025-23385
Published: 28 January 2025
Description
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
Security Summary
CVE-2025-23385 is a local privilege escalation vulnerability via the ETW Host Service, affecting JetBrains ReSharper versions prior to 2024.3.4, 2024.2.8, and 2024.1.7; Rider prior to 2024.3.4, 2024.2.8, and 2024.1.7; dotTrace prior to 2024.3.4, 2024.2.8, and 2024.1.7; and ETW Host Service prior to version 16.43. The issue is associated with CWE-114 and has a CVSS v3.1 base score of 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
A local attacker with low privileges can exploit this vulnerability, requiring high attack complexity but no user interaction. Successful exploitation allows the attacker to escalate privileges, resulting in high impacts to confidentiality, integrity, and availability within a changed scope.
JetBrains has published details on fixes in the listed versions. Additional information is available in their advisory at https://www.jetbrains.com/privacy-security/issues-fixed/.
Details
- CWE(s)